CVE-2024-46532

CVE number: CVE-2024-46532 vendor: Shanghai Dingxiang Information Technology Co., Ltd.https://www.kancloud.cn/ product: Internet Medical System Medical Outpatient OpenHIS version: V1.0 affected component: https://github.com/1638824607/OpenHIS?tab=readme-ov-file Reproduction of SQL Injection...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

OpenHIS SQL Injection Vulnerability

OpenHIS is a web-based hospital management application from China Xinzhi OpenHIS. A SQL injection vulnerability exists in OpenHIS v.1.0, which stems from a lack of validation of externally-entered SQL statements in the refund function of the PayController.class.php component. An attacker can...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

OpenHIS security vulnerabilities

OpenHIS is a web-based hospital management application from China Xinzhi OpenHIS. A SQL injection vulnerability exists in OpenHIS v.1.0, which stems from a lack of validation of externally-entered SQL statements in the refund function of the PayController.class.php component. An attacker can...

CVE-2024-46532: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

CVE-2024-46532

The OpenHIS web-based hospital management application (v.1.0) is vulnerable to a SQL Injection flaw in the PayController.class.php component. The root cause is a lack of validation for externally-entered SQL statements within the refund function . An attacker can exploit this to execute illegal S...

PT-2024-32024 · Openhis · Openhis

Name of the Vulnerable Software and Affected Versions: OpenHIS version 1.0 Description: A SQL Injection issue allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component. Users are urged to update to the latest release to mitigate risks...