Human Resources Information Technology (eHR) Management Platform suffers from SQL Injection Vulnerability

hereinafter referred to as the same share software focuses on the manufacturing industry, commercial circulation industry, government departments, enterprises and institutions, such as a full range of management software research and development and services, with the domestic industry's well-kno...

File Upload Vulnerability in E-Trend Intelligent eHR Management Platform

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. There is a file upload vulnerability in E-Trend's intelligent eHR management platform,...

Wenzhou Yitian Information Technology Co., Ltd. Yitian Intelligent eHR Management Platform Exists Arbitrary File Upload Vulnerability

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. Wenzhou E-Trend Information Technology Co., Ltd E-Trend Intelligent eHR Management...

LibreHealth EHR File Upload Vulnerability

LibreHealth EHR is a free and open source electronic health record and medical practice management application. LibreHealth EHR 2.0.0 contains a file upload vulnerability that could be exploited by attackers to achieve remote code execution RCE on a hosted web server by uploading a maliciously...

CVE-2020-23829

interface/new/newcomprehensivesave.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution RCE on the hosting webserver by uploading a maliciously crafted image...

CVE-2020-23829

CVE-2020-23829 affects LibreHealth EHR 2.0.0, specifically interface/new/new_comprehensive_save.php, with an authenticated file-upload flaw that enables remote code execution on the hosting webserver via a crafted image. The descriptions consistently indicate RCE risk when a user uploads a malici...

LibreHealth EHR Local File Inclusion Vulnerability

LibreHealth EHR is a free open source electronic health record and medical practice management application. LibreHealth EHR 2.0.0 suffers from a local file inclusion vulnerability that can be exploited by an attacker to include and execute arbitrary PHP files in the EMR application...

CVE-2018-1000839

LH-EHR version REL-200 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attack appear to be exploitable via Uploading a PHP file with image MIME type...

CVE-2018-1000839

LH-EHR version REL-200 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attack appear to be exploitable via Uploading a PHP file with image MIME type...

CVE-2018-1000839

The CVE-2018-1000839 entry concerns LH-EHR REL-2_0_0, which has an Arbitrary File Upload flaw in the Profile picture upload feature that can lead to Remote Code Execution. The exploit path is described as uploading a PHP file with an image MIME type, enabling code execution on the server. Public ...

CVE-2018-1000839

LH-EHR version REL-200 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attack appear to be exploitable via Uploading a PHP file with image MIME type...

Arbitrary File Deletion Vulnerability in LibreHealthIO LH-EHR

LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. An arbitrary file deletion vulnerability exists in the export template in the LibreHealthIO LH-EHR REL-2.0.0 release. An attacker can exploit this vulnerability to cause a denial of servic...

LibreHealthIO LH-EHR SQL Injection Vulnerability

LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. A SQL injection vulnerability exists in the Show Groups Popup SQL query function in the LibreHealthIO LH-EHR REL-2.0.0 release. A remote attacker can exploit the vulnerability to execute...

Arbitrary File Write Vulnerability in LibreHealthIO LH-EHR

LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. An arbitrary file write vulnerability exists in the export template in the LibreHealthIO LH-HER REL-2.0.0 release. An attacker can exploit this vulnerability to write files with malicious...

CVE-2018-1000650

LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters...

CVE-2018-1000650

LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters...

CVE-2018-1000648

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled parameters...

CVE-2018-1000646

LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result in write files with malicious content and may lead to remote code execution...

CVE-2018-1000647

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of service. This attack appear to be exploitable via User controlled parameter...

CVE-2018-1000646

LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result in write files with malicious content and may lead to remote code execution...