Description (CNA)
OMICARD EDM’s API function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to access, modify, delete database or disrupt service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ITPison / OMICARD EDM | affected 5.8 through 6.0 |
CWE
CWE-89
References
- https://www.twcert.org.tw/tw/cp-132-6372-f61bc-1.html
- https://www.chtsecurity.com/news/48032532-b2de-401c-97a8-a2be5691988f
ADP enrichment
No English description supplied.