Skip to content
OpenAdvisories

Vendor

Le-yan

6 known vulnerabilities.

4 results · Clear filters · Feed

  • Critical 9.8

    Le-show Medical Practice Management System - SQL Injection

    Le-show medical practice management system from Le-yan has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

  • Critical 9.8

    Le-yan Co., Ltd. Personnel and Salary Management System - Hard-coded password

    Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service.

  • Critical 9.8

    Le-yan Co., Ltd. dental management system - Hard-coded Credentials

    The Le-yan dental management system contains a hard-coded credentials vulnerability in the web page source code, which allows an unauthenticated remote attacker to acquire administrator’s privilege and control the system or disrupt service.

  • Critical 9.8

    Le-yan Co., Ltd. dental management system - SQL Injection

    The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator’s privilege and perform arbitrary operations on the system …