166 matches found
KiviCare Clinic & Patient Management System (EHR) <= 3.6.4 - SQL Injection
The KiviCare Clinic & Patient Management System EHR plugin for WordPress is vulnerable to SQL Injection via the 'visittypeserviceid' parameter of the taxcalculateddata AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of...
Hongjing e-HR 2020 - SQL Injection
A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /wselfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument...
CVE-2026-15453
CVE-2026-15453 affects the KiviCare – Clinic & Patient Management System (EHR) WordPress plugin. The issue is a generic SQL Injection in the internal searchTerm parameter across all versions up to 4.5.1, caused by insufficient escaping and lack of proper query preparation. This allows authenticat...
CVE-2026-15453 KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' Parameter
The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to generic SQL Injection via the 'searchTerm' parameter in all versions up to, and including, 4.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existi...
CVE-2024-14037 Redsea Cloud eHR Unauthenticated File Upload RCE via PtFjk.mob
Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading malicious files through the PtFjk.mob servlet endpoint. Attackers can submit a multipart POST request with a JSP webshell disguised using a spoofed...
CVE-2024-14037
Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading malicious files through the PtFjk.mob servlet endpoint. Attackers can submit a multipart POST request with a JSP webshell disguised using a spoofed...
CVE-2022-31494
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...
CVE-2022-31496
LibreHealth EHR Base 2.0.0 allows incorrect interface/super/managesitefiles.php access...
CVE-2022-31492
Cross Site scripting XSS vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroupadminadd.php Username...
CVE-2022-31497
LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...
CVE-2022-31493
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...
CVE-2022-31495
LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...
EUVD-2020-16567
Malware in sbrugna...
EUVD-2024-34176
Malicious code in bioql PyPI...
EUVD-2022-52950
Malicious code in bioql PyPI...
EUVD-2022-52951
Malicious code in bioql PyPI...
EUVD-2022-34247
Malicious code in bioql PyPI...
EUVD-2022-34248
Malicious code in bioql PyPI...