Description (CNA)
An exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially crafted web requests can cause commands to be executed on the server. An attacker can send a web request with parameters containing specific parameter to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and compromise underlying operating system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / OpenClinic | affected OpenClinic GA 5.173.3 |
CWE
CWE-77
References
ADP enrichment
No English description supplied.