CVE-2023-40279

An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main.do...

OpenClinic GA 5.247.01 - Path Traversal (Authenticated) Vulnerability

Exploit Title: OpenClinic GA 5.247.01 - Path Traversal Authenticated Vendor Homepage: https://sourceforge.net/projects/open-clinic/ Software Link: https://sourceforge.net/projects/open-clinic/ Version: OpenClinic GA 5.247.01 Tested on: Windows 10, Windows 11 CVE: CVE-2023-40279 Details An issue w...

CVE-2023-40279

A directory path traversal vulnerability exists in OpenClinic GA 5.247.01 . An attacker can exploit the Page parameter in a GET request to the main.do endpoint to traverse directories. This flaw allows for the retrieval and execution of files from arbitrary directories. Proof of concepts are avai...