CVE-2024-3226

A vulnerability was found in Campcodes Online Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259071.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Online%20Patient%20Record%20Management%20System%20-%20vuln%201.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259071Permissions Required, VDB Entry
• https://vuldb.com/?id.259071Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.308644Exploit, Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Online%20Patient%20Record%20Management%20System%20-%20vuln%201.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259071Permissions Required, VDB Entry
• https://vuldb.com/?id.259071Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.308644Exploit, Third Party Advisory, VDB Entry

Published

Apr 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-32238H3C ER8300G2-X is vulnerable to Incorrect Access Control. Th…9.8
• CVE-2024-3224A vulnerability has been found in SourceCodester PHP Task Ma…8.8
• CVE-2024-3225A vulnerability was found in SourceCodester PHP Task Managem…6.5
• CVE-2024-32254Phpgurukul Tourism Management System v2.0 is vulnerable to U…8.8
• CVE-2024-32256Phpgurukul Tourism Management System v2.0 is vulnerable to U…8.1
• CVE-2024-32258The network server of fceux 2.7.0 has a path traversal vulne…8.8
• CVE-2024-32268An issue in Tuya Smart camera U6N v.3.2.5 allows a remote at…3.3
• CVE-2024-32269An issue in Yonganda YAD-LOJ V3.0.561 allows a remote attack…7.5
• CVE-2024-3227A vulnerability was found in Panwei eoffice OA up to 9.5. It…7.2
• CVE-2024-3228The Social Sharing Plugin – Kiwi plugin for WordPress is vul…5.3
• CVE-2024-32281Tenda AC7V1.0 v15.03.06.44 firmware contains a command injec…8.8
• CVE-2024-32282Tenda FH1202 v1.2.0.14(408) firmware contains a command inje…6.3