CVE-2021-36351

SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the 1 pday, 2 pmonth, and 3 pyear parameters in GET requests sent to /modules/nursing/nursing-station.php...

CVE-2021-36351

SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the 1 pday, 2 pmonth, and 3 pyear parameters in GET requests sent to /modules/nursing/nursing-station.php...

CVE-2021-36351

CVE-2021-36351 affects Care2x Open Source Hospital Information Management 2.7 Alpha. A SQL injection exists in the nursing-station module (GET parameters pday, pmonth, pyear) due to lack of input validation in /modules/nursing/nursing-station.php. This allows an attacker to manipulate SQL command...