PT-2026-57345

Name of the Vulnerable Software and Affected Versions YosemiteCrew affected versions not specified Description Broken access control allows registered users, including those with low-privilege patient or companion-app accounts, to modify or delete service catalogues and PMS task-library or templa...

CVE-2020-8519: Improper Neutralization of Special Elements used in an SQL Command

SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

CVE-2020-8520: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

PT-2020-6133

Name of the Vulnerable Software and Affected Versions phpzag live add edit delete data tables records with ajax php mysql affected versions not specified Description The issue is related to a lack of protection against SQL query structure exploitation, potentially allowing a remote attacker to...