CVE-2021-36352

Stored cross-site scripting XSS vulnerability in Care2x Hospital Information Management 2.7 Alpha. The vulnerability has found POST requests in /modules/registrationadmission/patientregister.php page with "namemiddle", "addrstr", "station", "namemaiden", "name2", "name3" parameters...

SQL Injection Vulnerability in Various Collaboration Office Management Platforms of Beijing Lianda Power

Beijing Lianda Power Information Technology Co., Ltd. is a company that specializes in providing comprehensive operation and management software systems and services for hospitals. A SQL injection vulnerability exists in various collaborative office management platforms of Beijing Lianda Power. A...

SQL Injection Vulnerability in Submission System of Nanjing Jenohan Software Technology Co.

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. A SQL injection vulnerability exists in the contribution...