Lucene search
PRIOn knowledge basePRION:CVE-2017-5598HistoryJan 27, 2017 - 10:59 a.m.
Sql injection
2017-01-2710:59:00
PRIOn knowledge base
www.prio-n.com
2
An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un-authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique, such as select_loadfile(). The vulnerability affects the EmployeePortalServlet page and the following parameter: employer.
| CPE | Name | Operator | Version |
|---|---|---|---|
| patient_portal | eq | 8.0 |
Related
nvd
nvd
CVE-2017-5598
2017-01-27 10:59:00
cve
cve
CVE-2017-5598
2017-01-27 10:59:00
cvelist
cvelist
CVE-2017-5598
2017-01-27 10:10:00