CVE-2023-24610
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NOSH ChartingSystem是专为医生和患者设计的电子健康记录系统。 NOSH ChartingSystem 4a5cfdb存在安全漏洞。攻击者利用该漏洞可以执行PHP任意代码。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-24610
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed. This may allow attackers to steal Protected Health Information because the product is for health charting.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
NOSH ChartingSystem 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NOSH ChartingSystem是专为医生和患者设计的电子健康记录系统。 NOSH ChartingSystem 4a5cfdb存在安全漏洞。攻击者利用该漏洞可以执行PHP任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2023-24610
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | This is a proof of concept for CVE-2023-24610 | https://github.com/abbisQQ/CVE-2023-24610 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-24610
请登录查看更多情报信息。
Other References for CVE-2023-24610 (4)
Same Patch Batch · n/a · 2023-02-01 · 44 CVEs total
| CVE-2022-30904 | 8.2 HIGH | Bluetooth Mesh 缓冲区错误漏洞 |
| CVE-2022-31363 | 8.2 HIGH | Bluetooth Mesh 缓冲区错误漏洞 |
| CVE-2022-31364 | 8.2 HIGH | Bluetooth Mesh 缓冲区错误漏洞 |
| CVE-2022-25916 | 7.4 HIGH | mt7688-wiscan 安全漏洞 |
| CVE-2022-25906 | 7.4 HIGH | is-http2 操作系统命令注入漏洞 |
| CVE-2023-23136 | lmxcms 路径遍历漏洞 | |
| CVE-2023-0454 | OrangeScrum 路径遍历漏洞 | |
| CVE-2023-23130 | ConnectWise Automate 安全漏洞 | |
| CVE-2023-23132 | Selfwealth 信任管理问题漏洞 | |
| CVE-2023-23131 | Selfwealth 安全漏洞 | |
| CVE-2023-23135 | Ftdms 代码问题漏洞 | |
| CVE-2023-23077 | ZOHO ManageEngine ServiceDesk Plus 跨站脚本漏洞 | |
| CVE-2023-23076 | ZOHO ManageEngine SupportCenter Plus 操作系统命令注入漏洞 | |
| CVE-2023-23075 | ZOHO ManageEngine AssetExplorer 跨站脚本漏洞 | |
| CVE-2023-23074 | ZOHO ManageEngine ServiceDesk Plus 跨站脚本漏洞 | |
| CVE-2023-23073 | ZOHO ManageEngine ServiceDesk Plus 跨站脚本漏洞 | |
| CVE-2023-20856 | VMware vRealize Operations 跨站请求伪造漏洞 | |
| CVE-2023-0587 | Trend Micro Apex One 代码问题漏洞 | |
| CVE-2023-0524 | Tenable.Sc 安全漏洞 | |
| CVE-2023-25012 | Linux kernel 资源管理错误漏洞 |
Showing top 20 of 44 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2023-24610
No comments yet