EUVD-2012-4205

Malware in sbrugna...

EUVD-2012-4206

Malware in sbrugna...

EUVD-2012-4204

Malware in sbrugna...

myCare2x CMS Multiple Vulnerabilities

No description provided by source...

CVE-2012-4260

Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the 1 aktion or 2 callurl parameter to modules/patient/mycare2xpatinfo.php; 3 deptnr or 4 pid parameter to modules/importer/mycare2ximporter.php; 5 myOpsEintrag or 6 keyword parameter i...

CVE-2012-4261

SQL injection vulnerability in modules/patient/mycare2xpatinfo.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter...

CVE-2012-4262

Multiple cross-site scripting XSS vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the 1 namelast, 2 namefirst, 3 namemiddle, or 4 namemaiden parameter to modules/patient/mycarepid.php; 5 favorites or 6 lang parameter to...

Sql injection

SQL injection vulnerability in modules/patient/mycare2xpatinfo.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the 1 namelast, 2 namefirst, 3 namemiddle, or 4 namemaiden parameter to modules/patient/mycarepid.php; 5 favorites or 6 lang parameter to...

Sql injection

Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the 1 aktion or 2 callurl parameter to modules/patient/mycare2xpatinfo.php; 3 deptnr or 4 pid parameter to modules/importer/mycare2ximporter.php; 5 myOpsEintrag or 6 keyword parameter i...

CVE-2012-4262

Multiple cross-site scripting XSS vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the 1 namelast, 2 namefirst, 3 namemiddle, or 4 namemaiden parameter to modules/patient/mycarepid.php; 5 favorites or 6 lang parameter to...

CVE-2012-4262

CVE-2012-4262 affects the myCare2x CMS with multiple XSS vulnerabilities. The CFP vectors are injected via parameters in several modules: name_last/name_first/name_middle/name_maiden (modules/patient/mycare_pid.php), favorites/lang (modules/nursing/mycare_ward_print.php), aktion/callurl (modules/...

CVE-2012-4261

The CVE-2012-4261 entry describes a SQL injection vulnerability in the myCare2x web application, specifically in modules/patient/mycare2x_pat_info.php, where remote attackers can execute arbitrary SQL commands through the lang parameter. The publicly provided documents confirm the affected compon...

CVE-2012-4261

SQL injection vulnerability in modules/patient/mycare2xpatinfo.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter...

CVE-2012-4260

Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the 1 aktion or 2 callurl parameter to modules/patient/mycare2xpatinfo.php; 3 deptnr or 4 pid parameter to modules/importer/mycare2ximporter.php; 5 myOpsEintrag or 6 keyword parameter i...

CVE-2012-4260

CVE-2012-4260 affects the myCare2x CMS with multiple SQL injection flaws in eight parameters across modules/patient/mycare2x_pat_info.php, modules/importer/mycare2x_importer.php, modules/drg/mycare2x_proc_search.php, and modules/patient/mycare_pid.php. Root cause is unsanitized user input used in...

PT-2012-5289

Name of the Vulnerable Software and Affected Versions myCare2x affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the lang parameter in the modules/patient/mycare2x pat info.php module. Recommendations At the momen...

PT-2012-5288

Name of the Vulnerable Software and Affected Versions myCare2x affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters in different PHP files, including aktion or callurl in...

PT-2012-5290

Name of the Vulnerable Software and Affected Versions myCare2x affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters to various P...

CVE-2012-4262: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the 1 namelast, 2 namefirst, 3 namemiddle, or 4 namemaiden parameter to modules/patient/mycarepid.php; 5 favorites or 6 lang parameter to...