CVE-2021-39375

Philips Healthcare Tasy Electronic Medical Record EMR 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValue parameter...

CVE-2021-39375

creationtimestamp| type| source ---|---|--- 2021-08-24 16:23:23+00:00| seen| https://t.me/cibsecurity/27765...

CVE-2021-39375

Philips Tasy EMR SQL Injection CVEs 2021-39375 and 2021-39376 affect HTML5 3.06.1803 and earlier. 3.06.1803 (and prior) allow SQL injection via WAdvancedFilter/getDimensionItemsByCode FilterValue and via CorCad_F2/executaConsultaEspecifico IE_CORPO_ASSIST or CD_USUARIO_CONVENIO parameters. ROOT C...