Description (CNA)
A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findDistrict parameter in ‘‘patientslist.do’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / OpenClinic GA | affected OpenClinic GA 5.173.3 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.