CVE-2023-4176

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file appointmentapproval.php. The manipulation of the argument time leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-236211.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Aug 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-417635.3Skype for Business Elevation of Privilege VulnerabilityCVE-2023-417645.5Microsoft Office Spoofing VulnerabilityCVE-2023-417658.1Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityCVE-2023-417667.8Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege VulnerabilityCVE-2023-417678.1Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityCVE-2023-417688.1Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityCVE-2023-417698.1Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityCVE-2023-41775.7A vulnerability was found in EmpowerID up to 7.205.0.0. It has been rated as problematic. This issue affects some unknown processing of the CVE-2023-417708.1Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityCVE-2023-417718.1Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityCVE-2023-417727.8Win32k Elevation of Privilege VulnerabilityCVE-2023-417738.1Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-4176: Critical severity, CVSS 9.8 | Vulnix