CVE-2020-11438

Description

References

• know.bishopfox.com/advisories · Third Party Advisory
• labs.bishopfox.com/advisories/librehealth-version-2.0.0-0 · Exploit
• librehealth.io · Vendor Advisory

librehealth ehr의 다른 취약점

• CVE-2022-31496높음 8.8LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.
• CVE-2022-31497보통 6.1LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.
• CVE-2022-31495보통 6.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.
• CVE-2022-31494보통 6.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.
• CVE-2022-31498보통 6.1LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.