C4G BLIS Improper Access Control

Computing For Good’s Basic Laboratory Information System also known as C4G BLIS version 3.5 and earlier suffers from an instance of CWE-284, “Improper Access Control.” As a result, an unauthenticated user may alter several facets of a user account, including promoting any user to an administrator...

Online Receipt Computer Advantage Buffer Overflow Vulnerability

Online Receipt Computer Advantage CRCA is a medical accounting software package from ORCA Management Organization, Japan. The software supports features such as electronic medical record management and collaborative software extensions. A buffer overflow vulnerability exists in ORCA, which can be...

OpenEMR Security Bypass Vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security bypass vulnerability exists in the 'csvloghtml' function in th...