Star Computer Star Practice Management Web 访问控制错误漏洞

Star Computer Star Practice Management Web is a web service used for time-based billing by Star Computer UK.An access control error vulnerability exists in Star Practice Management Web version 2019.2.0.6, which could be exploited by an attacker to The vulnerability can be exploited to change the...

PT-2021-11521

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: A Cross-Site Request Forgery CSRF issue exists, allowing an attacker to change user privileges, potentially granting themselves administrative roles or removing administrative...

CVE-2020-28402: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel...

Star Computer Star Practice Management Web 跨站请求伪造漏洞

Star Computer Star Practice Management Web is a web service used for time-based billing by Star Computer UK.A cross-site request forgery vulnerability exists in Star Practice Management Web version 2019.2.0.6, which could be exploited by an attacker to The vulnerability can be exploited to change...

Star Computer Star Practice Management Web 访问控制错误漏洞

Star Computer Star Practice Management Web is a web service used for time-based billing by Star Computer UK.An access control error vulnerability exists in Star Practice Management Web version 2019.2.0.6, which could be exploited by an attacker to The vulnerability accesses details of unauthorize...

CVE-2020-28401: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to...

PT-2021-11519

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows unauthorized users to access Work In Progress WIP details about jobs they should not have access to. Recommendations: For version...

PT-2021-11520

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An improper authorization issue exists, allowing unauthorized users to access the Launcher Configuration Panel. Recommendations: For version 2019.2.0.6, restrict access to the...

PT-2021-11524

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows unauthorized users to access job details they should not have access to, specifically through the Audit Trail Feature...

PT-2021-11523

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows an unauthorized user to modify user privileges within the application. This can lead to the unauthorized user granting themselves...

Star Computer Star Practice Management Web 访问控制错误漏洞

Star Computer Star Practice Management Web is a web service used for time-based billing by Star Computer, a UK-based company. The vulnerability can be exploited to access the WIP details of unauthorized jobs...

PT-2021-11522

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An improper authorization issue exists, allowing unauthorized users to access the Billing page without the necessary privileges. Recommendations: For version 2019.2.0.6, update to a...

CVE-2020-28405: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change the privileges of any user of the application. This can be used to grant himself the administrative role or remove all administrative accounts of the...

CVE-2020-28406: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature...

Vulnerability Spotlight: Multiple vulnerabilities in phpGACL class

Claudio Bozzato of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in the phpGACL class. One of these vulnerabilities also affects OpenEMR, a medical practice management software written in PHP. phpGACL is a PHP library...

400 Vet Locations Nipped by Ryuk Ransomware

National Veterinary Associates NVA has been hit with the Ryuk ransomware, in an attack that affects 400 clinics across the country. The California company said that it could take a week for its facilities to be fully back up and running normally. Patient records, payment systems and practice...

openEMR 4.2.0 Cross Site Scripting / SQL Injection

Advisory: Multiple reflecting/stored XSS- and SQLi-vulnerabilities in openEMR v.4.2.0 Advisory ID: SROEADV-2015-08 Author: Steffen Rösemann Affected Software: openEMR v.4.2.0 Release-date: 28th Dec 2014 Vendor URL: http://www.open-emr.org Vendor Status: patched CVE-ID: to be assigned after releas...

OpenEMR 4.1.1 Patch 14 - Multiple Vulnerabilities

OpenEMR 4.1.1 Patch 14 - Multiple Vulnerabilities Exploit Title: OpenEMR 4.1.1 Patch 14 Multiple Vulnerabilities Date: Sep 17 2013 Exploit Author: xistence Vendor Homepage: www.open-emr.org Tested on: CentOS 5.9 32-bit Affected Version : 4.1.1 Patch 14 and lower Fix: Upgrade to OpenEMR 4.1.2...

OpenEMR 4.1.1 Patch 14 - Multiple Vulnerabilities

OpenEMR is a Free and Open Source electronic health records and medical practice management application that can run on Windows, Linux, Mac OS X, and many other platforms. OpenEMR is ONC Complete Ambulatory EHR certified and is one of the most popular open source electronic medical records in use...

OpenEMR 4.1.1 Shell Upload

?php / OpenEMR 4.1.1 ofcuploadimage.php Arbitrary File Upload Vulnerability Vendor: OpenEMR Product web page: http://www.open-emr.org Affected version: 4.1.1 Summary: OpenEMR is a Free and Open Source electronic health records and medical practice management application that can run on Windows,...