CVE-2024-10810

Published Nov 5, 2024

Last updated 11 days ago

Overview

Description
A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file Doctor/app_request.php. The manipulation of the argument app_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Source
cna@vuldb.com
NVD status
Analyzed

Risk scores

CVSS 4.0

Type
Secondary
Base score
5.3
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity
MEDIUM

CVSS 3.1

Type
Primary
Base score
7.5
Impact score
3.6
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity
HIGH

CVSS 2.0

Type
Secondary
Base score
6.5
Impact score
6.4
Exploitability score
8
Vector string
AV:N/AC:L/Au:S/C:P/I:P/A:P

Weaknesses

nvd@nist.gov
CWE-89
cna@vuldb.com
CWE-707

Social media

Hype score
Not currently trending
  1. 🚨 CVE-2024-10810 (Published: 2024-11-05) affects SQL Server 2019. Exploited versions are vulnerable to critical security risks. Ensure your systems are updated and patched to mitigate potential threats. For detailed remediation steps, check out the full report:… https://t.co/W8H

    @transilienceai

    9 Nov 2024

    5 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. 🚨 CVE-2024-10810 (Published: 2024-11-05) - A critical vulnerability affecting SQL Server 2019. Ensure your systems are updated to the latest version to mitigate risks. For detailed remediation steps, check the full report here: https://t.co/fMdxDRPe5H #CyberSecurity… https://t.c

    @transilienceai

    9 Nov 2024

    2 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. 🚨 CVE-2024-10810 (Published: 2024-11-05) - A critical vulnerability in E-Health Care System affects multiple versions. Ensure your systems are updated to the latest patches to mitigate risks. For more details and remediation steps, visit: https://t.co/BrOve8Synw #CyberSecurity…

    @transilienceai

    9 Nov 2024

    0 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. 🚨 CVE-2024-10810 (Published: 2024-11-05) - Critical vulnerability in E-Health Care System. Affects multiple versions. Immediate remediation is crucial to protect sensitive data. For detailed guidance and updates, visit: https://t.co/BrOve8Synw #CyberSecurity #CVE… https://t.co/6

    @transilienceai

    9 Nov 2024

    14 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. CVE-2024-10810 A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file Doctor/app_reques… https://t.co/ovkAYqjWSg

    @CVEnew

    5 Nov 2024

    376 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

Configurations