CVE-2024-4257

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/deleteStudy.php. The manipulation of the argument documentUniqueId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-262149 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Apr 27, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-425709.8School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at admininsert.php.CVE-2024-425719.8School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.CVE-2024-425729.8School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php.CVE-2024-425739.8School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php.CVE-2024-425749.8School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php.CVE-2024-425759.8School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php.CVE-2024-425768.8A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate priv CVE-2024-425778.8A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privile CVE-2024-425788.0A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privil CVE-2024-425798.8A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privilege CVE-2024-42589.8The Video Gallery – YouTube Playlist, Channel Gallery by YotuWP plugin for WordPress is vulnerable to Local File Inclusion in all versions u CVE-2024-425808.8A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileg