CVE-2024-11073

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-266
• CWE-285
• CWE-639

• https://drive.google.com/file/d/1yFo0re8taTry7oR4-EDg3UHwO2lkqO9N/view?usp=sharingExploit
• https://github.com/Salah-Tayeh/CVEs-and-Vulnerabilities/blob/main/Hospital%20Management%20System%20-%20IDOR%20Causing%20Deletion%20of%20any%20patient%20account.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.283869Permissions Required, VDB Entry
• https://vuldb.com/?id.283869Permissions Required, VDB Entry
• https://vuldb.com/?submit.440799Exploit, Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/Product

Published

Nov 11, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-11067The D-Link DSL6740C modem has a Path Traversal Vulnerability…7.5
• CVE-2024-11068The D-Link DSL6740C modem has an Incorrect Use of Privileged…9.8
• CVE-2024-11069The WordPress GDPR plugin for WordPress is vulnerable to una…9.1
• CVE-2024-1107Authorization Bypass Through User-Controlled Key vulnerabili…9.8
• CVE-2024-11070A vulnerability, which was classified as problematic, has be…5.4
• CVE-2024-11071Permissive Cross-domain Policy with Untrusted Domains vulner…8.8
• CVE-2024-11074A vulnerability classified as critical was found in itsource…9.8
• CVE-2024-11075A vulnerability in the Incoming Goods Suite allows a user wi…8.8
• CVE-2024-11076A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-11077A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-11078A vulnerability has been found in code-projects Job Recruitm…5.4
• CVE-2024-11079A flaw was found in Ansible-Core. This vulnerability allows …5.5