Lucene search
PRIOn knowledge basePRION:CVE-2017-5570HistoryJan 23, 2017 - 5:59 p.m.
Sql injection
2017-01-2317:59:00
PRIOn knowledge base
www.prio-n.com
8
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the messageJson.jsp, which can only be exploited by authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile().
| CPE | Name | Operator | Version |
|---|---|---|---|
| patient_portal | eq | 7.0 |
Related
cvelist
cvelist
CVE-2017-5570
2017-01-23 17:00:00
nvd
nvd
CVE-2017-5570
2017-01-23 17:59:00
cve
cve
CVE-2017-5570
2017-01-23 17:59:00