CVE-2023-7172

Description

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249356.

NVD

Severity: HIGH
CVE ID: CVE-2023-7172
CVSS Score: 7.2
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

VulDB

Severity: HIGH
CVE ID: CVE-2023-7172
CVSS Score: 7.3
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Refrence: NVDMITRE

Proof Of Concept

sharathc213

Refrence: GitHub