CVE-2024-28320

Publication date

2024-04-29 00:00:00

Family

mitre

State

PUBLISHED

Description

Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php.