CVE-2023-4440

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been classified as critical. This affects an unknown part of the file appointment.php. The manipulation of the argument sheduledate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237561 was assigned to this vulnerability.

• CWE-89

• https://github.com/CookedMelon/cve/tree/master/hospital/patientThird Party Advisory
• https://vuldb.com/?ctiid.237561Press/Media Coverage, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.237561Third Party Advisory, VDB Entry
• https://github.com/CookedMelon/cve/tree/master/hospital/patientThird Party Advisory
• https://vuldb.com/?ctiid.237561Press/Media Coverage, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.237561Third Party Advisory, VDB Entry

Published

Aug 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-44394MantisBT is an open source bug tracker. Due to insufficient …4.3
• CVE-2023-44395Autolab is a course management service that enables instruct…6.5
• CVE-2023-44396iTop is an IT service management platform. Dashlet edits aj…5.4
• CVE-2023-44397CloudExplorer Lite is an open source, lightweight cloud mana…9.8
• CVE-2023-44398Exiv2 is a C++ library and a command-line utility to read, w…8.8
• CVE-2023-44399ZITADEL provides identity infrastructure. In versions 2.37.2…5.3
• CVE-2023-44400Uptime Kuma is a self-hosted monitoring tool. Prior to versi…7.8
• CVE-2023-44401The Silverstripe CMS GraphQL Server serves Silverstripe data…5.3
• CVE-2023-44402Electron is an open source framework for writing cross-platf…7
• CVE-2023-44403D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command In…8.8
• CVE-2023-44404D-Link DAP-1325 get_value_from_app Stack-based Buffer Overfl…8.8
• CVE-2023-44405D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow…8.8