Description
A low-privilege user may use SQL syntax to write arbitrary files to the OpenClinic GA 5.09.02 and 5.89.05b server, which may allow the execution of arbitrary commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| open source | OpenClinic GA | 5.09.02, 5.89.05b | — |