CVE-2018-1000648

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled parameters...

CVE-2018-1000645

CVE-2018-1000645 affects LibreHealthIO lh-ehr prior to REL-2.0.0. The vulnerability is an Authenticated Local File Disclosure in the Importing of templates feature, where a user-controlled variable in the import templates function can disclose sensitive server files. This is documented across mul...

lh-aurich.de XSS vulnerability

Open Bug Bounty ID: OBB-621509 Description| Value ---|--- Affected Website:| lh-aurich.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lh-syke.de XSS vulnerability

Open Bug Bounty ID: OBB-454120 Description| Value ---|--- Affected Website:| lh-syke.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Struts2 remote code execution vulnerability(S2-0 1 3) temporary solutions-vulnerability warning-the black bar safety net

Struts2 again broke remote code execution vulnerability, specifically as detailed in the Struts2 remote code execution vulnerability analysisS2-0 1 3 of The following is the LH Team out of a temporary solution: Modified files: org. apache. struts2. views. util. DefaultUrlHelper 2 8 1–2 8 4 lines:...

Avira AntiVir RAR/CAB/ZIP/LH Scan Evasion

The remote host is running an Avira AntiVir product. The scan engine of the installed product is earlier than 7.9.0.180 / 8.2.0.180. Such versions reportedly fail to properly inspect specially crafted RAR/CAB/ZIP/LH files. An attacker could embed code in such files in order to circumvent detectio...