CVE-2024-11057

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Nov 10, 2024
Updated: Nov 14, 2024
CWE ID 74
CWE ID 89

Summary

CVE-2024-11057 is a newly disclosed critical vulnerability affecting the Codezips Hospital Appointment System 1.0. An unknown functionality in the file /removeBranchResult.php is the source of this issue, which allows for sql injection through the manipulation of the ID/Name argument. This vulnerability is remote and has been made public, increasing the risk of exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share