CVE-2024-46532

Número de CVE: CVE-2024-46532 proveedor: Shanghai Dingxiang Information Technology Co., Ltd. https://www.kancloud.cn/ producto: Sistema médico de Internet OpenHIS de consulta médica versión: V1.0 componente afectado: https://github.com/1638824607/OpenHIS?tab=readme-ov-file Reproducción de...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

OpenHIS SQL Injection Vulnerability

OpenHIS is a web-based hospital management application from China Xinzhi OpenHIS. A SQL injection vulnerability exists in OpenHIS v.1.0, which stems from a lack of validation of externally-entered SQL statements in the refund function of the PayController.class.php component. An attacker can...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

OpenHIS 安全漏洞

OpenHIS is a web-based hospital management application from China Xinzhi OpenHIS. A SQL injection vulnerability exists in OpenHIS v.1.0, which stems from a lack of validation of externally-entered SQL statements in the refund function of the PayController.class.php component. An attacker can...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

CVE-2024-46532

The OpenHIS web-based hospital management application (v.1.0) is vulnerable to a SQL Injection flaw in the PayController.class.php component. The root cause is a lack of validation for externally-entered SQL statements within the refund function . An attacker can exploit this to execute illegal S...