CyberRota Analysis
AI-GeneratedThe Online Medicine Delivery System 1.0 is vulnerable to SQL injection through the Order::pupdate function, specifically in the controller.php file, where the manipulation of the ID argument can be exploited remotely. This vulnerability could allow attackers to execute arbitrary SQL commands, potentially compromising the integrity and confidentiality of the database. Organizations using this system should prioritize patching this vulnerability to mitigate the risk of data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.