146 matches found
CVE-2022-31496
CVE-2022-31496 affects LibreHealth EHR Base 2.0.0. A misconfigured access control on the interface/super/manage_site_files.php endpoint allows unauthorized access, with sources noting possible remote code execution in some catalogs. The available documents do not specify a vendor-provided fix ver...
CVE-2022-31496
LibreHealth EHR Base 2.0.0 allows incorrect interface/super/managesitefiles.php access...
CVE-2022-31497
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
CVE-2022-31497
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
Cross site scripting
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
CVE-2022-31497
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
CVE-2022-31497
CVE-2022-31497 affects LibreHealth EHR Base 2.0.0. The vulnerability is a patient-facing XSS in the web interface’s interface/main/finder/finder_navigation.php due to inadequate input filtering/escaping. The Red Hat/EUVD/CNVD and OSV entries in the connected set corroborate the same flaw descript...
CVE-2022-31497
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
LibreHealth EHR 安全漏洞
LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out of the box and customizable for use in a variety of healthcare environments. version 2.0.0 of LibreHealth EHR is vulnerable to an access control error that could be exploited by an attacker ...
PT-2022-20764 · Unknown · Librehealth Ehr Base
Name of the Vulnerable Software and Affected Versions: LibreHealth EHR Base version 2.0.0 Description: The issue allows for incorrect access to the interface/super/manage site files.php. The estimated number of potentially affected devices worldwide is not available. There is no information about...
LibreHealth EHR Cross-Site Scripting Vulnerability (CNVD-2022-65033)
LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out of the box and customizable for use in a variety of healthcare settings. a cross-site scripting vulnerability exists in LibreHealth EHR Base version 2.0.0. The vulnerability stems from a...
LibreHealth EHR 跨站脚本漏洞
LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out of the box and customizable for use in a variety of healthcare settings. The navigation.php page lacks filtering and escaping for parameters. An attacker could exploit this vulnerability to...
CVE-2022-31495
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...
CVE-2022-31495
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...
Cross site scripting
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...
CVE-2022-31495
CVE-2022-31495 affects LibreHealth EHR Base 2.0.0, where the gacl/admin/acl_admin.php return_page parameter is vulnerable to XSS. The root cause is improper handling of user-supplied data in return_page, enabling client-side JavaScript execution. The connected Red Hat, CNVD, OSV, and CVE records ...
CVE-2022-31495
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...
CVE-2022-31495
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...
LibreHealth EHR 跨站脚本漏洞
LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out of the box and customizable for use in a variety of healthcare settings. version 2.0.0 of LibreHealth EHR is vulnerable to a cross-site scripting vulnerability that originates in the...