CVE-2024-2316

A vulnerability has been found in Bdtask Hospital AutoManager up to 20240227 and classified as problematic. This vulnerability affects unknown code of the file /billing/bill/edit/ of the component Update Bill Page. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-256270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-352

• https://drive.google.com/file/d/1v_Ee2FWlbpLgHYIl88COPp05EHSxUWI0/view?usp=sharingExploit
• https://vuldb.com/?ctiid.256270Permissions Required, VDB Entry
• https://vuldb.com/?id.256270Permissions Required, VDB Entry
• https://drive.google.com/file/d/1v_Ee2FWlbpLgHYIl88COPp05EHSxUWI0/view?usp=sharingExploit
• https://vuldb.com/?ctiid.256270Permissions Required, VDB Entry
• https://vuldb.com/?id.256270Permissions Required, VDB Entry

Published

Mar 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23154A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.…7.8
• CVE-2024-23155A maliciously crafted MODEL file, when parsed in atf_asm_int…7.8
• CVE-2024-23156A maliciously crafted 3DM file, when parsed in opennurbs.dll…7.8
• CVE-2024-23157A maliciously crafted SLDASM or SLDPRT file, when parsed in …7.8
• CVE-2024-23158A maliciously crafted IGES file, when parsed in ASMImport229…7.8
• CVE-2024-23159A maliciously crafted STP file, when parsed in stp_aim_x64_v…7.8
• CVE-2024-23168Vulnerability in Xiexe XSOverlay before build 647 allows non…9.8
• CVE-2024-23169The web interface in RSA NetWitness 11.7.2.0 allows Cross-Si…4.6
• CVE-2024-2317A vulnerability was found in Bdtask Hospital AutoManager up …9.1
• CVE-2024-23170An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.…5.5
• CVE-2024-23171An issue was discovered in the CampaignEvents extension in M…5.4
• CVE-2024-23172An issue was discovered in the CheckUser extension in MediaW…5.4