2 matches found
CVE-2020-28939
OpenClinic version 0.8.2 is affected by a medical/testnew.php insecure file upload vulnerability. This vulnerability allows authenticated users with substantial privileges to upload malicious files, such as PHP web shells, which can lead to arbitrary code execution on the application server...
8.6CVSS0.01742EPSS
SaveExploits1References1
CVE-2020-28939: Unrestricted Upload of File with Dangerous Type
OpenClinic version 0.8.2 is affected by a medical/testnew.php insecure file upload vulnerability. This vulnerability allows authenticated users with substantial privileges to upload malicious files, such as PHP web shells, which can lead to arbitrary code execution on the application server...
7.2CVSS6.4AI score0.01742EPSS
SaveExploits1References2
20