CVE-2020-27231

A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findDistrict parameter in ‘‘patientslist.do’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...

PT-2021-11327

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.173.3 Description: The issue concerns an exploitable SQL injection vulnerability in the 'patientslist.do' page of the application. Specifically, the findDistrict parameter in the 'patientslist.do' page is vulnerable to...

CVE-2020-27231: Improper Neutralization of Special Elements used in an SQL Command

A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findDistrict parameter in ‘‘patientslist.do’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...

OpenClinic GA SQL注入漏洞

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. An SQL injection vulnerability exists in the findDistrict parameter of the "Patientslist.do" page in OpenClinic GA...