A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected by this vulnerability is the function session_start of the file adminappview.php. Executing a manipulation of the argument adminmail can lead to authorization bypass. The attack may be launched remotely. The exploit has been published and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version detail

A vulnerability has been identified in subhajitkhan's online-clinic-management-system up to commit e9ee77a8827a1446220fa07ee693dc4d9a29a578. The flaw exists in the session_start function within adminappview.php, where manipulation of the adminmail argument can lead to an authorization bypass. The vulnerability is remotely exploitable and a public exploit has already been published and is available for use. The product uses a rolling release model, meaning no specific version numbers are available for affected or patched releases. The project maintainer was notified via an issue report but has not yet responded. This poses a significant risk to healthcare environments using this clinic management software. The lack of vendor response and availability of a public exploit increases the urgency for users to take mitigating action.