CVE-2024-28320

Published: 2024-04-29T18:15Z

Last Modified: 2025-04-01T14:50Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt