EUVD-2020-19745

Malware in sbrugna...

CVE-2020-27232

An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

OpenClinic GA SQL Injection Vulnerability (CNVD-2021-34999)

OpenClinic GA is an open source hospital integrated information management system . A SQL injection vulnerability exists in manageServiceStocks.jsp in OpenClinic GA version 5.173.3. An attacker can exploit this vulnerability through a specially crafted HTTP request to conduct a SQL injection atta...

CVE-2020-27232

An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2020-27232

OpenClinic GA 5.173.3 contains an exploitable authenticated SQL injection in manageServiceStocks.jsp. The vulnerability stems from dynamic SQL built using user-supplied FindServiceUid in the Find operation (ServiceStock.find), which concatenates input into the WHERE clause (OC_STOCK_SERVICEUID IN...

PT-2021-11328

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.173.3 Description: The issue is related to a SQL injection vulnerability in the 'manageServiceStocks.jsp' page. It can be triggered by a specially crafted HTTP request, allowing an attacker to perform SQL injection aft...

CVE-2020-27232: Improper Neutralization of Special Elements used in an SQL Command

An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

OpenClinic GA SQL injection vulnerability

OpenClinic GA is an open source hospital integrated information management system . A SQL injection vulnerability exists in manageServiceStocks.jsp in OpenClinic GA version 5.173.3. An attacker can exploit this vulnerability through a specially crafted HTTP request to conduct a SQL injection atta...

OpenClinic GA Web portal SQL injection vulnerability in 'manageServiceStocks.jsp' page

Summary An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Tested Versions OpenClinic GA 5.173.3...