CVE-2023-29863: Improper Neutralization of Special Elements used in an SQL Command

Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem:statement parameter in the WSDL files...

PT-2023-22454 · Medical Systems Co. · Medisys Weblab Products

Name of the Vulnerable Software and Affected Versions: Medical Systems Co. Medisys Weblab Products version 19.4.03 Description: The issue is a SQL injection vulnerability that can be exploited via the tem:statement parameter in the WSDL files. This allows for potential unauthorized access to...

Medical System Medisys Weblab Products SQL注入漏洞

Medical System Medisys Weblab Products is a client module for Medical System's LIS. It is a tool that allows laboratory clients to log in their own samples and subsequently view the results. A security vulnerability exists in Medical System Medisys Weblab Products version v19.4.03 that stems from...