CVE-2024-57775

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid...

PT-2025-3569

Name of the Vulnerable Software and Affected Versions JFinalOA versions prior to v2025.01.01 Description The issue is related to a SQL injection vulnerability. It affects the component getWorkFlowHis?insid. Recommendations For versions prior to v2025.01.01, update to version v2025.01.01 or later ...

CVE-2024-57775: Improper Neutralization of Special Elements used in an SQL Command

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid...

CVE-2022-29939

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sleobprocess.php leads to multiple cross-site scripting XSS vulnerabilities...

CVE-2022-29939

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sleobprocess.php leads to multiple cross-site scripting XSS vulnerabilities...

LibreHealth EHR 跨站脚本漏洞

LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out-of-the-box or customized for use in a variety of healthcare settings. A security vulnerability exists in LibreHealth EHR 2.0.0, which stems from a missing filter escape for the GET parameter...

CVE-2022-29939: Improper Neutralization of Input During Web Page Generation

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sleobprocess.php leads to multiple cross-site scripting XSS vulnerabilities...

PT-2022-19923

Name of the Vulnerable Software and Affected Versions LibreHealth EHR version 2.0.0 Description The issue arises from the lack of sanitization of the GET parameters debug and InsId in the interfacebillingsl eob process.php file, leading to multiple cross-site scripting XSS vulnerabilities...