227 matches found
CVE-2022-3760
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mia Technology Mia-Med. This issue affects Mia-Med: before 1.0.0.58...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mia Technology Mia-Med.This issue affects Mia-Med: before 1.0.0.58...
CVE-2022-3760 SQLi in Mia-Med
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mia Technology Mia-Med. This issue affects Mia-Med: before 1.0.0.58...
CVE-2022-3760 SQLi in Mia-Med
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mia Technology Mia-Med. This issue affects Mia-Med: before 1.0.0.58...
CVE-2022-3760
CVE-2022-3760 affects Mia-Med (Mia Technology) up to version 1.0.0.58. Root cause: improper neutralization of special elements in an SQL command, enabling SQL injection. Impact: high confidentiality, integrity, and availability risks per CVSS 3.1/3.1 metrics. Affected component: Mia-Med applicati...
Mia-Med SQL注入漏洞
Mia-Med is a digital hospital system. A security vulnerability exists in Mia Technology Mia-Med prior to version 1.0.0.58 that stems from an improper neutralization of the particular element used and a SQL injection vulnerability...
CVE-2022-3760: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mia Technology Mia-Med. This issue affects Mia-Med: before 1.0.0.58...
med-congress.info Cross Site Scripting vulnerability OBB-3201531
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
med-kolleg.de Cross Site Scripting vulnerability OBB-3199802
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
carolinamedcenter.com Cross Site Scripting vulnerability OBB-3128928
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
med-kolleg.de Cross Site Scripting vulnerability OBB-3109003
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bihoku.aichi.med.or.jp Cross Site Scripting vulnerability OBB-3085815
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
med-congress.info Cross Site Scripting vulnerability OBB-3068844
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Anyone can get access to ERC20 tokens in LooksRareAggregator contract
Lines of code Vulnerability details Impact The TokenRescuer contract helps to rescue eth and erc20 tokens and can only be called by the owner. However, any trapped eth or erc20 tokens can actually be taken out by anyone. Essentially the function and access control of the TokenReceiver contract ca...
med-engineering.co.uk Cross Site Scripting vulnerability OBB-2980996
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
med-kolleg.de Cross Site Scripting vulnerability OBB-2935086
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
californiamedlaw.com Cross Site Scripting vulnerability OBB-2768332
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
urps-med-idf.org Cross Site Scripting vulnerability OBB-2735181
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
concordmedspa.com Cross Site Scripting vulnerability OBB-2660896
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...