2024-04-29 20:03:26 +00:00

24 lines
890 B
JSON

{
"id": "CVE-2024-28320",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-04-29T18:15:07.553",
"lastModified": "2024-04-29T18:15:07.553",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php."
}
],
"metrics": {},
"references": [
{
"url": "https://packetstormsecurity.com/files/177326/Hospital-Management-System-1.0-Insecure-Direct-Object-Reference-Account-Takeover.html",
"source": "cve@mitre.org"
},
{
"url": "https://sospiro014.github.io/Hospital-Management-System-1.0-Insecure-Direct-Object-Reference-+-Account-Takeover",
"source": "cve@mitre.org"
}
]
}