| Package | Affected versions | Patched versions |
|---|---|---|
| harmony | = 4.1.0.2.83 |
A SQL injection vulnerability exists in the login functionality of WellSky Harmony version 4.1.0.2.83 within the 'xmHarmony.asp' endpoint. User-supplied input to the 'TXTUSERID' parameter is not properly sanitized before being incorporated into a SQL query. Successful authentication may lead to authentication bypass, data leakage, or full system compromise of backend database contents.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free