Skip to content
OpenAdvisories

Vendor

Softwebinternational

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.1

    Clinic Pro SQL Injection via monthly_expense_overview month Parameter

    Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the month parameter. Attackers can send POST requests to the monthly_expense_overview endpoint with crafted mont…