OpenClinic GA SQL Injection (CVE-2020-27233; CVE-2020-27234; CVE-2020-27235; CVE-2020-27236; CVE-2020-27237; CVE-2020-27238; CVE-2020-27239; CVE-2020-27240)

An SQL injection vulnerability exists in OpenClinic GA. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-27238

The CVE-2020-27238 family concerns OpenClinic GA 5.173.3, where the getAssets.jsp page is vulnerable to SQL injection across multiple input parameters. Connected sources enumerate specific injectable fields including code, nomenclature, compnomenclature, description, serviceuid, serialnumber, ass...