Description (CNA)
A low-privilege user may use SQL syntax to write arbitrary files to the OpenClinic GA 5.09.02 and 5.89.05b server, which may allow the execution of arbitrary commands.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| open source / OpenClinic GA | affected 5.09.02; affected 5.89.05b |
CWE
CWE-250
References
ADP enrichment
No English description supplied.