Sql injection

2023-11-0715:15:00

PRIOn knowledge base

www.prio-n.com

remoteclinic 2.0

sql injection

time-based

'start' parameter

nvd

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.2%

RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the ‘start’ GET parameter of patients/index.php.

CPENameOperatorVersion
remote_cliniceq2.0

CPE	Name	Operator	Version
	remote_clinic	eq	2.0

References

github.com/remoteclinic/RemoteClinic/issues/25