Skip to content
OpenAdvisories

Vendor

MedDream

40 known vulnerabilities.

Products

MedDream PACS Premium 33 PACS Server 4 MedDream PACS Server 1 WEB DICOM Viewer 1 PACS Server Premium 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2018-25372

    MedDream PACS Server Premium 6.7.1.1 SQL Injection via email

    MedDream PACS Server Premium 6.7.1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the email parameter. Attackers can submit crafted POST requests to the user…

    MedDream PACS Server Premium
  • High 8.8
    CVE-2020-37009

    MedDream PACS Server 6.8.3.751 - Remote Code Execution

    MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized users to upload malicious PHP files. Attackers can exploit the uploadImage.php endpoint by authenticating and uploading a PHP shell to execute …

    MedDream MedDream PACS Server