Philips Healthcare Tasy Electronic Medical Record (EMR) SQL Injection Vulnerability (CNVD-2021-94942)

Philips Healthcare Tasy Electronic Medical Record (EMR) is a comprehensive healthcare informatics solution that addresses all areas of the healthcare environment, connecting the dots between clinical and non-clinical areas of the healthcare continuum. philips Healthcare Tasy Electronic Medical Record (EMR) version 3.06 is vulnerable to an SQL injection vulnerability. An attacker can exploit this vulnerability to conduct SQL injection attacks via the WAdvancedFilter/getDimensionItemsByCode FilterValue parameter.