CVE-2024-46532

CVE番号: CVE-2024-46532 ベンダー: 上海顶想信息科技有限公司https://www.kancloud.cn/ 製品: 互联网医疗系统医疗门诊OpenHIS バージョン: V1.0 影響を受けるコンポーネント: https://github.com/1638824607/OpenHIS?tab=readme-ov-file OpenHISにおけるSQLインジェクション脆弱性の再現 脆弱性： OpenHIS-master/Application/His/Controller/PayController.class.php 脆弱性コード： public function...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

OpenHIS SQL Injection Vulnerability

OpenHIS is a web-based hospital management application from China Xinzhi OpenHIS. A SQL injection vulnerability exists in OpenHIS v.1.0, which stems from a lack of validation of externally-entered SQL statements in the refund function of the PayController.class.php component. An attacker can...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

OpenHIS 安全漏洞

OpenHIS is a web-based hospital management application from China Xinzhi OpenHIS. A SQL injection vulnerability exists in OpenHIS v.1.0, which stems from a lack of validation of externally-entered SQL statements in the refund function of the PayController.class.php component. An attacker can...

CVE-2024-46532

The OpenHIS web-based hospital management application (v.1.0) is vulnerable to a SQL Injection flaw in the PayController.class.php component. The root cause is a lack of validation for externally-entered SQL statements within the refund function . An attacker can exploit this to execute illegal S...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

CVE-2024-46532: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

PT-2024-32024 · Openhis · Openhis

Name of the Vulnerable Software and Affected Versions: OpenHIS version 1.0 Description: A SQL Injection issue allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component. Users are urged to update to the latest release to mitigate risks...