Philips Healthcare Tasy Electronic Medical Record (EMR) SQL Injection Vulnerability

Philips Healthcare Tasy Electronic Medical Record (EMR) is a comprehensive healthcare informatics solution that addresses all areas of the healthcare environment, connecting the dots between clinical and non-clinical areas of the healthcare continuum. philips Healthcare Tasy Electronic Medical Record (EMR) version 3.06 is vulnerable to an SQL injection vulnerability. An attacker can exploit the vulnerability for SQL injection attacks via the CorCad_F2/executaConsultaEspecifico IE_CORPO_ASSIST or CD_USUARIO_CONVENIO parameters.