CVE-2023-40279

概要

参考情報

• BugBountyHunterCVE/CVE-2023-40279 · Exploit
• sourceforge.net/projects/open-clinic · Product

openclinic ga のその他の脆弱性

• CVE-2023-40278高 7.5An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.js…
• CVE-2023-40280高 7.5An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET reques…
• CVE-2023-40277中 6.1An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting (XSS) vulnerability has been discovered in the login.jsp…
• CVE-2023-40276緊急 9.1An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile…
• CVE-2023-40275緊急 9.1An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search…