CVE-2024-46532

CVE番号: CVE-2024-46532 ベンダー: 上海顶想信息科技有限公司https://www.kancloud.cn/ 製品: 互联网医疗系统医疗门诊OpenHIS バージョン: V1.0 影響を受けるコンポーネント: https://github.com/1638824607/OpenHIS?tab=readme-ov-file OpenHISにおけるSQLインジェクション脆弱性の再現 脆弱性： OpenHIS-master/Application/His/Controller/PayController.class.php 脆弱性コード： public function...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

OpenHIS SQL Injection Vulnerability

OpenHIS is a web-based hospital management application from China Xinzhi OpenHIS. A SQL injection vulnerability exists in OpenHIS v.1.0, which stems from a lack of validation of externally-entered SQL statements in the refund function of the PayController.class.php component. An attacker can...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...

OpenHIS 安全漏洞

OpenHIS is a web-based hospital management application from China Xinzhi OpenHIS. A SQL injection vulnerability exists in OpenHIS v.1.0, which stems from a lack of validation of externally-entered SQL statements in the refund function of the PayController.class.php component. An attacker can...

CVE-2024-46532

The OpenHIS web-based hospital management application (v.1.0) is vulnerable to a SQL Injection flaw in the PayController.class.php component. The root cause is a lack of validation for externally-entered SQL statements within the refund function . An attacker can exploit this to execute illegal S...

CVE-2024-46532

SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...