Security Advisory

CVE-2024-11674

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-11-25 23:31:05
Last updated 2024-11-26 15:35:38
Assigner VulDB
State PUBLISHED

Description

A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an unknown function of the file /backend/doc/his_doc_update-account.php. The manipulation of the argument doc_dpic leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.