Sql injection

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoService parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...

Sql injection

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoLocation parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...

Sql injection

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoBuyer parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...

CVE-2020-27246

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoComment parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...

CVE-2020-27246

OpenClinic GA 5.173.3 contains CVE-2020-27246: an authenticated SQL injection in the listImmoLabels.jsp page, via the immoComment parameter. The TALOS advisory documents the vulnerability as a flaw in dynamic SQL construction (immoService, immoLocation, immoCode, immoBuyer, immoComment), with cra...

CVE-2020-27245

OpenClinic GA 5.173.3 is affected by CVE-2020-27245, an authenticated SQL injection in the listImmoLabels.jsp page. The vulnerability involves the immoBuyer parameter and can be triggered by an authenticated HTTP request (examples in TALOS-2020-1208 show the pattern of exploitation for this and r...

CVE-2020-27244

OpenClinic GA 5.173.3 is affected by SQL injection in the listImmoLabels.jsp page. The vulnerability stems from building SQL with user-controlled inputs (immoLocation, immoService, immoCode, immoBuyer, immoComment) using string concatenation, then preparing and executing that statement. This lead...

CVE-2020-27244

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoCode parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerabili...

CVE-2020-27243

OpenClinic GA 5.173.3 contains authenticated SQL injection flaws in the listImmoLabels.jsp page. The vulnerabilities arise from building SQL with user-supplied parameters (e.g., immoService, immoLocation, immoCode, immoBuyer, immoComment) and then executing via a prepared statement, enabling inje...

CVE-2020-27243

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoService parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...

CVE-2020-27242

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoLocation parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...

OpenClinic GA SQL Injection Vulnerability (CNVD-2021-34999)

OpenClinic GA is an open source hospital integrated information management system . A SQL injection vulnerability exists in manageServiceStocks.jsp in OpenClinic GA version 5.173.3. An attacker can exploit this vulnerability through a specially crafted HTTP request to conduct a SQL injection atta...

OpenClinic GA SQL Injection Vulnerability (CNVD-2021-34496)

OpenClinic GA is an open source hospital integrated information management system . A SQL injection vulnerability exists in quickFile.jsp in OpenClinic GA version 5.173.3. An attacker can exploit this vulnerability via a specially crafted HTTP request to conduct a SQL injection attack...

PT-2021-11338

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.173.3 Description: An exploitable SQL injection issue exists in the 'listImmoLabels.jsp' page of the application. The immoLocation parameter in this page is vulnerable to authenticated SQL injection. An attacker can ma...

PT-2021-11340

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.173.3 Description: An exploitable SQL injection issue exists in the 'listImmoLabels.jsp' page of the application. The immoCode parameter in this page is vulnerable to authenticated SQL injection. An attacker can make a...

PT-2021-11339

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.173.3 Description: An exploitable SQL injection issue exists in the 'listImmoLabels.jsp' page of the application. The immoService parameter in this page is vulnerable to authenticated SQL injection. An attacker can mak...

PT-2021-11342

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.173.3 Description: An exploitable SQL injection issue exists in the 'listImmoLabels.jsp' page of the application. The immoComment parameter in this page is vulnerable to authenticated SQL injection. An attacker can mak...

CVE-2020-27232

An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2020-27232

An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

Sql injection

An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...