Skip to content
OpenAdvisories
Medium · 6.4 CVE-2020-27226 EUVD-2020-19739GHSA-5r4w-r2x6-xx68

An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can le…

Published May 10, 2021 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— OpenClinic OpenClinic GA 5.173.3 —

References