CVE-2024-32167

9.1 criticalEPSS 0.7%

Critical (9.1) in oretnom23 online medicine ordering system. EPSS 0.7% chance of exploitation in the next 30 days.

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
Published: 2024-06-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oretnom23:online_medicine_ordering_system

References

https://github.com/ss122-0ss/cms/blob/main/omos.md
https://github.com/ss122-0ss/cms/blob/main/omos.md

Check your stack JSON