CVE-2022-3956

The CVE-2022-3956 entry concerns tsruban HHIMS 2.1, specifically the Patient Portrait Handler. A manipulation of the PID argument enables a SQL injection, with remote exploitation possible. Root cause is an injectable handling of PID in the affected component. Documentation indicates a patch is r...