CVE-2024-28320: Mayurik Hospital Management System

High severity, CVSS 7.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php.

Affected products

• Mayurik Hospital Management System: version 1.0 only

Published 2024-04-29. Last modified 2026-06-17.