Cross site request forgery (csrf)

eClinicalWorks Population Health CCMR suffers from a cross-site request forgery CSRF vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for requests that could lead to the creation, modification and deletion of users,...

CVE-2015-4593

eClinicalWorks Population Health CCMR suffers from a cross-site request forgery CSRF vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for requests that could lead to the creation, modification and deletion of users,...

Sql injection

eClinicalWorks Population Health CCMR suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input...

CVE-2015-4593

CVE-2015-4593 refers to a cross-site request forgery vulnerability in the EClinicalWorks Population Health (CCMR) Client Portal, specifically in portalUserService.jsp. The issue could allow remote attackers to hijack content administrator authentication and perform actions such as creating, modif...

CVE-2015-4592

eClinicalWorks Population Health CCMR suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input...

CVE-2015-4592: Improper Neutralization of Special Elements used in an SQL Command

eClinicalWorks Population Health CCMR suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input...

PT-2017-6766

Name of the Vulnerable Software and Affected Versions eClinicalWorks Population Health CCMR affected versions not specified Description The issue is related to an SQL injection vulnerability in the portalUserService.jsp file. This vulnerability allows remote authenticated users to inject arbitrar...

CVE-2015-4593: Cross-Site Request Forgery (CSRF)

eClinicalWorks Population Health CCMR suffers from a cross-site request forgery CSRF vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for requests that could lead to the creation, modification and deletion of users,...

PT-2017-6767

Name of the Vulnerable Software and Affected Versions eClinicalWorks Population Health CCMR affected versions not specified Description The issue is related to a cross-site request forgery CSRF vulnerability. This vulnerability is located in the portalUserService.jsp file and can be exploited by...