CVE-2024-46532

The OpenHIS web-based hospital management application (v.1.0) is vulnerable to a SQL Injection flaw in the PayController.class.php component. The root cause is a lack of validation for externally-entered SQL statements within the refund function . An attacker can exploit this to execute illegal S...