Vendor
Softwebinternational
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.1
Clinic Pro SQL Injection via monthly_expense_overview month Parameter
Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the month parameter. Attackers can send POST requests to the monthly_expense_overview endpoint with crafted mont…