Security Advisory
CVE-2024-28320
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php.