OpenClinic GA SQL Injection Vulnerability (CNVD-2021-34996)

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. An SQL injection vulnerability exists in the immoBuyer parameter in listImmoLabels.jsp in OpenClinic GA version...

CVE-2020-27245

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoBuyer parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...

CVE-2020-27245: Improper Neutralization of Special Elements used in an SQL Command

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoBuyer parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...

PT-2021-11341

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.173.3 Description: An exploitable SQL injection issue exists in the 'listImmoLabels.jsp' page of the application. The immoBuyer parameter in this page is vulnerable to authenticated SQL injection, allowing an attacker ...

OpenClinic GA SQL injection vulnerability

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. An SQL injection vulnerability exists in the immoBuyer parameter in listImmoLabels.jsp in OpenClinic GA version...