CVE-2021-36351: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the 1 pday, 2 pmonth, and 3 pyear parameters in GET requests sent to /modules/nursing/nursing-station.php...

PT-2021-21246

Name of the Vulnerable Software and Affected Versions Care2x Open Source Hospital Information Management version 2.7 Alpha Description The issue is related to SQL injection, which occurs via the pday, pmonth, and pyear parameters in GET requests sent to the "/modules/nursing/nursing-station.php"...