Lucene search
PRIOn knowledge basePRION:CVE-2020-27227HistoryApr 13, 2021 - 3:15 p.m.
Command injection
2021-04-1315:15:00
PRIOn knowledge base
www.prio-n.com
5
An exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially crafted web requests can cause commands to be executed on the server. An attacker can send a web request with parameters containing specific parameter to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and compromise underlying operating system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openclinic_ga | eq | 5.173.3 |
Related
nvd
nvd
CVE-2020-27227
2021-04-13 15:15:12
cve
cve
CVE-2020-27227
2021-04-13 15:15:12
cvelist
cvelist
CVE-2020-27227
2021-04-13 14:12:45
talos
talos
OpenClinic GA unauthenticated command injection vulnerability
2021-04-13 00:00:00