19 matches found
EUVD-2012-4204
Malware in sbrugna...
EUVD-2012-4205
Malware in sbrugna...
EUVD-2012-4206
Malware in sbrugna...
myCare2x CMS Multiple Vulnerabilities
No description provided by source...
CVE-2012-4260
Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the 1 aktion or 2 callurl parameter to modules/patient/mycare2xpatinfo.php; 3 deptnr or 4 pid parameter to modules/importer/mycare2ximporter.php; 5 myOpsEintrag or 6 keyword parameter i...
CVE-2012-4261
SQL injection vulnerability in modules/patient/mycare2xpatinfo.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter...
CVE-2012-4262
Multiple cross-site scripting XSS vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the 1 namelast, 2 namefirst, 3 namemiddle, or 4 namemaiden parameter to modules/patient/mycarepid.php; 5 favorites or 6 lang parameter to...
Sql injection
Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the 1 aktion or 2 callurl parameter to modules/patient/mycare2xpatinfo.php; 3 deptnr or 4 pid parameter to modules/importer/mycare2ximporter.php; 5 myOpsEintrag or 6 keyword parameter i...
Sql injection
SQL injection vulnerability in modules/patient/mycare2xpatinfo.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the 1 namelast, 2 namefirst, 3 namemiddle, or 4 namemaiden parameter to modules/patient/mycarepid.php; 5 favorites or 6 lang parameter to...
CVE-2012-4260
Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the 1 aktion or 2 callurl parameter to modules/patient/mycare2xpatinfo.php; 3 deptnr or 4 pid parameter to modules/importer/mycare2ximporter.php; 5 myOpsEintrag or 6 keyword parameter i...
CVE-2012-4261
SQL injection vulnerability in modules/patient/mycare2xpatinfo.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter...
CVE-2012-4262
Multiple cross-site scripting XSS vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the 1 namelast, 2 namefirst, 3 namemiddle, or 4 namemaiden parameter to modules/patient/mycarepid.php; 5 favorites or 6 lang parameter to...
CVE-2012-4260
CVE-2012-4260 affects the myCare2x CMS with multiple SQL injection flaws in eight parameters across modules/patient/mycare2x_pat_info.php, modules/importer/mycare2x_importer.php, modules/drg/mycare2x_proc_search.php, and modules/patient/mycare_pid.php. Root cause is unsanitized user input used in...
CVE-2012-4261
The CVE-2012-4261 entry describes a SQL injection vulnerability in the myCare2x web application, specifically in modules/patient/mycare2x_pat_info.php, where remote attackers can execute arbitrary SQL commands through the lang parameter. The publicly provided documents confirm the affected compon...
CVE-2012-4262
CVE-2012-4262 affects the myCare2x CMS with multiple XSS vulnerabilities. The CFP vectors are injected via parameters in several modules: name_last/name_first/name_middle/name_maiden (modules/patient/mycare_pid.php), favorites/lang (modules/nursing/mycare_ward_print.php), aktion/callurl (modules/...
myCare2x CMS - Multiple Vulnerabilities
myCare2x CMS - Multiple Vulnerabilities Title: ====== myCare2x CMS - Multiple Web Vulnerabilities Date: ===== 2012-05-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=524 VL-ID: ===== 524 Introduction: ============= myCare2x is an web application. All program modules...
myCare2x CMS - Multiple Vulnerabilities
Title: ====== myCare2x CMS - Multiple Web Vulnerabilities Date: ===== 2012-05-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=524 VL-ID: ===== 524 Introduction: ============= myCare2x is an web application. All program modules and data accesses are processed in the...
myCare2x CMS Cross Site Scripting / SQL Injection
Title: ====== myCare2x CMS - Multiple Web Vulnerabilities Date: ===== 2012-05-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=524 VL-ID: ===== 524 Introduction: ============= myCare2x is an web application. All program modules and data accesses are processed in the...