CVE-2021-39375

Philips Tasy EMR SQL Injection CVEs 2021-39375 and 2021-39376 affect HTML5 3.06.1803 and earlier. 3.06.1803 (and prior) allow SQL injection via WAdvancedFilter/getDimensionItemsByCode FilterValue and via CorCad_F2/executaConsultaEspecifico IE_CORPO_ASSIST or CD_USUARIO_CONVENIO parameters. ROOT C...

CVE-2021-39376

Philips Tasy EMR HTML5 (version 3.06 and earlier) is affected by two SQL injection vulnerabilities: CVE-2021-39375 via the WAdvancedFilter/getDimensionItemsByCode FilterValue parameter, and CVE-2021-39376 via the CorCad_F2/executaConsultaEspecifico IE_CORPO_ASSIST or CD_USUARIO_CONVENIO parameter...