CVE-2025-15450

Summary: CVE-2025-15450 affects the sfturing hosp_order component (function findOrderHosNum) in /ssm_pro/orderHos/, where manipulation of hospitalAddress/hospitalName can trigger SQL injection. The vulnerability is remotely exploitable and a public exploit exists; affected versions are not clearl...

PT-2025-27228 · Unknown · Sfturing Hosp Order

Name of the Vulnerable Software and Affected Versions: sfturing hosp order up to 627f426331da8086ce8fff2017d65b1ddef384f8 Description: A critical vulnerability has been found in the affected software. The issue is related to the findAllHosByCondition function in the HospitalServiceImpl.java file,...