What is CVE-2023-37069?

CVE-2023-37069 is a critical-severity vulnerability in Online Hospital Management System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-08-10.

How severe is CVE-2023-37069?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Is CVE-2023-37069 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Online Hospital Management System Project

CVE-2023-37069

Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the login id and password fields during the login process, enabling an attacker to inject malicious SQL code.

Vulnerability class: SQL Injection

EPSS: 0.010 (60.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Online_hospital_management_system_project Online_hospital_management_system — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

References

cve@mitre.org (Product)
cve@mitre.org (Exploit, Third Party Advisory)
cve@mitre.org

Frequently asked questions

What is CVE-2023-37069?: CVE-2023-37069 is a critical-severity vulnerability in Online Hospital Management System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-08-10.
How severe is CVE-2023-37069?: Critical severity. CVSS v3 base score is 9.8 out of 10.
Is CVE-2023-37069 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.