Epiphany Healthcare Cardio Server SQL Injection Vulnerability

Epiphany Healthcare Cardio Server is a scalable ECG management system from Epiphany Healthcare, UK. A SQL injection vulnerability exists in Epiphany Healthcare Cardio Server versions prior to 4.0. A local attacker can exploit this vulnerability by inserting a SQL query into the URL of a landing...