Cyber Resilience

CVE-2024-32167

Oretnom23 Online Medicine Ordering System 1.0

Public PoC
Published
10 June 2024
Modified
21 November 2024
CVSS Score v3.1 9.1
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS Score 0.0067 49th percentile
Risk Priority 68 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2024-32167 is a critical-severity an unspecified weakness vulnerability in Oretnom23 Online Medicine Ordering System. Its CVSS base score is 9.1 (Critical).

Operationally, ranked at the 49th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2024-46293Same product: Oretnom23 Online Medicine Ordering System
CVE-2025-3140Same product: Oretnom23 Online Medicine Ordering System
CVE-2024-25217Same product: Oretnom23 Online Medicine Ordering System
CVE-2025-3141Same product: Oretnom23 Online Medicine Ordering System
CVE-2024-31650Same vendor: Oretnom23
CVE-2023-0686Same vendor: Oretnom23
CVE-2023-0256Same vendor: Oretnom23
CVE-2023-34581Same vendor: Oretnom23
CVE-2024-7370Same vendor: Oretnom23
CVE-2026-3771Same vendor: Oretnom23

Affected Assets

oretnom23
online medicine ordering system
1.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References