Browse CVEs

HIGH 7.5 CVE-2023-40279 An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main… Openclinic Ga No fix yet Fix from $1,9502024-03-19 HIGH 7.5 CVE-2023-40278 An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp compone… Openclinic Ga No fix yet Fix from $1,9502024-03-19 CRITICAL 9.1 CVE-2023-40275 An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchBy… Openclinic Ga Mitigation only Fix from $2,3002024-03-19 CRITICAL 9.1 CVE-2023-40276 An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile.jsp. Openclinic Ga No fix yet Fix from $2,3002024-03-19 HIGH 7.5 CVE-2023-40280 An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to popu… Openclinic Ga No fix yet Fix from $1,9502024-03-19 MEDIUM 6.1 CVE-2023-40277 An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting (XSS) vulnerability has been discovered in the login.jsp message … Openclinic Ga No fix yet Fix from $1,6002024-03-19 HIGH 7.8 CVE-2021-37364 OpenClinic GA 5.194.18 is affected by Insecure Permissions. By default the Authenticated Users group has the modify permission to openclinic folders/… Openclinic Ga No fix yet Fix from $1,9502021-10-26 HIGH 8.8 CVE-2020-27242 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoLocation parameter in th… Openclinic Ga No fix yet Fix from $1,9502021-05-11 HIGH 8.8 CVE-2020-27243 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoService parameter in the… Openclinic Ga No fix yet Fix from $1,9502021-05-11 HIGH 8.8 CVE-2020-27244 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoCode parameter in the ‘l… Openclinic Ga No fix yet Fix from $1,9502021-05-11 HIGH 8.8 CVE-2020-27245 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoBuyer parameter in the ‘… Openclinic Ga No fix yet Fix from $1,9502021-05-11 HIGH 8.8 CVE-2020-27246 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoComment parameter in the… Openclinic Ga No fix yet Fix from $1,9502021-05-11 HIGH 8.8 CVE-2020-27232 An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can le… Openclinic Ga No fix yet Fix from $1,9502021-05-10 HIGH 8.8 CVE-2020-27226 An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL … Openclinic Ga No fix yet Fix from $1,9502021-05-10 HIGH 8.8 CVE-2020-27229 A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findPersonID paramet… Openclinic Ga No fix yet Fix from $1,9502021-05-10 HIGH 8.8 CVE-2020-27230 A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findSector parameter… Openclinic Ga No fix yet Fix from $1,9502021-05-10 HIGH 8.8 CVE-2020-27231 A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findDistrict paramet… Openclinic Ga No fix yet Fix from $1,9502021-05-10 CRITICAL 9.8 CVE-2020-27241 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The serialnumber parameter in the getAssets.jsp p… Openclinic Ga No fix yet Fix from $2,3002021-04-19 CRITICAL 9.8 CVE-2020-27240 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The componentStatus parameter in the getAssets.js… Openclinic Ga No fix yet Fix from $2,3002021-04-19 CRITICAL 9.8 CVE-2020-27237 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the The nomenclature parame… Openclinic Ga No fix yet Fix from $2,3002021-04-15 CRITICAL 9.8 CVE-2020-27238 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is v… Openclinic Ga No fix yet Fix from $2,3002021-04-15 CRITICAL 9.8 CVE-2020-27239 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The assetStatus parameter in the getAssets.jsp pa… Openclinic Ga No fix yet Fix from $2,3002021-04-15 CRITICAL 9.8 CVE-2020-27235 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the description parameter. An attacker can make… Openclinic Ga No fix yet Fix from $2,3002021-04-13 CRITICAL 9.8 CVE-2020-27236 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the compnomenclature parameter. An attacker can… Openclinic Ga No fix yet Fix from $2,3002021-04-13 CRITICAL 9.8 CVE-2020-27227 An exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially crafted web requests can cause commands to be execute… Openclinic Ga No fix yet Fix from $2,3002021-04-13 CRITICAL 9.8 CVE-2020-27233 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the supplierUID parameter. An attacker can make… Openclinic Ga No fix yet Fix from $2,3002021-04-13 CRITICAL 9.8 CVE-2020-27234 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the serviceUID parameter. An attacker can make … Openclinic Ga No fix yet Fix from $2,3002021-04-13 HIGH 7.8 CVE-2020-27228 An incorrect default permissions vulnerability exists in the installation functionality of OpenClinic GA 5.173.3. Overwriting the binary can result i… Openclinic Ga No fix yet Fix from $1,9502021-04-13 HIGH 8.8 CVE-2020-14486 An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which … Openclinic Ga Mitigation only Fix from $1,9502020-07-29 HIGH 8.8 CVE-2020-14490 OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure … Openclinic Ga Mitigation only Fix from $1,9502020-07-29