Skip to content
OpenAdvisories
Medium · 6.4 CVE-2020-27232 EUVD-2020-19745GHSA-29jr-72j5-7p98

An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP requ…

Published May 10, 2021 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— OpenClinic GA OpenClinic GA 5.173.3 —

References