Medium severity6.3NVD Advisory· Published Aug 4, 2024· Updated Jun 17, 2026

CVE-2024-7454

Description

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is the function patient_name of the file patients.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273548.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oretnom23/Clinic\'s Patient Management System
cpe:2.3:a:oretnom23:clinic\'s_patient_management_system:1.0:*:*:*:*:*:*:*
Sourcecodester/Clinics Patient Management Systemllm-fuzzy2 versions
1.0+ 1 more
- (no CPE)range: 1.0
- (no CPE)range: 1.0

Patches

Vulnerability mechanics

References

github.com/lche511/cve/blob/main/sql.mdnvdExploitTechnical DescriptionThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000