CVE-2020-27245

OpenClinic GA 5.173.3 is affected by CVE-2020-27245, an authenticated SQL injection in the listImmoLabels.jsp page. The vulnerability involves the immoBuyer parameter and can be triggered by an authenticated HTTP request (examples in TALOS-2020-1208 show the pattern of exploitation for this and r...