146 matches found
CVE-2022-31493
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...
CVE-2022-31493
CVE-2022-31493 affects LibreHealth EHR Base 2.0.0 with a cross-site scripting vulnerability in gacl/admin/acl_admin.php (acl_id). The connected Red Hat, CNVD, OSV, CVE records consistently identify an XSS issue but do not provide detailed technical exploit steps, versions beyond 2.0.0, or remedia...
CVE-2022-31493
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...
LibreHealth EHR 跨站脚本漏洞
LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be both easy to use out of the box and customizable for use in a variety of healthcare settings. version 2.0.0 of LibreHealth EHR is vulnerable to a cross-site scripting vulnerability, for which no detailed...
LibreHealth EHR 跨站脚本漏洞
LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be both easy to use out of the box and customizable for use in a variety of healthcare settings.LibreHealth EHR 2.0.0 is vulnerable to a cross-site scripting vulnerability for which no detailed vulnerability...
LibreHealth EHR 跨站脚本漏洞
LibreHealth EHR is a clinically-focused electronic health record HER system designed to be both easy to use out of the box and customizable for use in a variety of healthcare settings. libreHealth EHR 2.0.0 is vulnerable to a cross-site scripting vulnerability for which no detailed vulnerability...
LibreHealth EHR 跨站脚本漏洞
LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out of the box and customizable for use in a variety of healthcare settings. a cross-site scripting vulnerability exists in LibreHealth EHR Base version 2.0.0. The vulnerability stems from a...
LibreHealth EHR SQL Injection Vulnerability (CNVD-2022-65034)
LibreHealth EHR is an open source electronic health record and medical practice management application. libreHealth EHR is vulnerable to SQL injection, which can be exploited by attackers to perform sql injection and steal data from the database...
CVE-2022-29940
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\findorderpopup.php leads to multiple cross-site scripting XSS vulnerabilities...
CVE-2022-29939
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sleobprocess.php leads to multiple cross-site scripting XSS vulnerabilities...
CVE-2022-29940
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\findorderpopup.php leads to multiple cross-site scripting XSS vulnerabilities...
CVE-2022-29939
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sleobprocess.php leads to multiple cross-site scripting XSS vulnerabilities...
CVE-2022-29938
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter paymentid in interface\billing\newpayment.php via interface\billing\paymentmaster.inc.php leads to SQL injection...
CVE-2022-29938
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter paymentid in interface\billing\newpayment.php via interface\billing\paymentmaster.inc.php leads to SQL injection...
Sql injection
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter paymentid in interface\billing\newpayment.php via interface\billing\paymentmaster.inc.php leads to SQL injection...
Cross site scripting
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sleobprocess.php leads to multiple cross-site scripting XSS vulnerabilities...
Cross site scripting
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\findorderpopup.php leads to multiple cross-site scripting XSS vulnerabilities...
CVE-2022-29938
The connected sources confirm a SQL injection vulnerability in LibreHealth EHR 2.0.0 caused by lack of sanitization of the GET parameter payment_id in interface\billing\new_payment.php through interface\billing\payment_master.inc.php. Affected component: LibreHealth EHR web interface billing modu...