CVE-2022-3956

The CVE-2022-3956 entry concerns tsruban HHIMS 2.1, specifically the Patient Portrait Handler. A manipulation of the PID argument enables a SQL injection, with remote exploitation possible. Root cause is an injectable handling of PID in the affected component. Documentation indicates a patch is r...

CVE-2022-3956 tsruban HHIMS Patient Portrait sql injection

A vulnerability classified as critical has been found in tsruban HHIMS 2.1. Affected is an unknown function of the component Patient Portrait Handler. The manipulation of the argument PID leads to sql injection. It is possible to launch the attack remotely. It is recommended to apply a patch to f...