| Package | Affected versions | Patched versions |
|---|---|---|
| librehealth ehr | = 2.0.0 |
interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution (RCE) on the hosting webserver by uploading a maliciously crafted image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free