CVE-2020-27244

OpenClinic GA 5.173.3 is affected by SQL injection in the listImmoLabels.jsp page. The vulnerability stems from building SQL with user-controlled inputs (immoLocation, immoService, immoCode, immoBuyer, immoComment) using string concatenation, then preparing and executing that statement. This lead...