Aller au contenu

Vulnérabilités de n/a OpenClinic GA

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2020-27246 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application 6.4 Moyenne 11 mai 2021
CVE-2020-27245 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application 6.4 Moyenne 11 mai 2021
CVE-2020-27244 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application 6.4 Moyenne 11 mai 2021
CVE-2020-27243 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application 6.4 Moyenne 11 mai 2021
CVE-2020-27242 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application 6.4 Moyenne 11 mai 2021
CVE-2020-27232 An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3 6.4 Moyenne 10 mai 2021
CVE-2020-27231 A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3… 6.4 Moyenne 10 mai 2021
CVE-2020-27230 A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3… 6.4 Moyenne 10 mai 2021
CVE-2020-27229 A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3… 6.4 Moyenne 10 mai 2021
CVE-2020-14491 OpenClinic GA versions 5.09.02 and 5.89.05b do not properly check permissions before executing SQL queries, which may… Non notée 20 juil. 2020
CVE-2020-14494 OpenClinic GA versions 5.09.02 and 5.89.05b contain an authentication mechanism within the system that does not… Non notée 20 juil. 2020
CVE-2020-14484 OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection,… Non notée 20 juil. 2020
CVE-2020-14485 OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted… Non notée 20 juil. 2020

Autres produits n/a