CVE-2012-4262: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the 1 namelast, 2 namefirst, 3 namemiddle, or 4 namemaiden parameter to modules/patient/mycarepid.php; 5 favorites or 6 lang parameter to...

CVE-2012-4260: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the 1 aktion or 2 callurl parameter to modules/patient/mycare2xpatinfo.php; 3 deptnr or 4 pid parameter to modules/importer/mycare2ximporter.php; 5 myOpsEintrag or 6 keyword parameter i...