Unscored CVE-2021-39375 EUVD-2021-25735GHSA-3937-gxfq-r6h8

Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterVal…

Published Aug 24, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValue parameter.

Advisories 1

ICSMA-21-308-01 Philips Tasy EMR CISA ICS & IT advisories · Nov 4, 2021

References

https://diesec.home.blog/2021/08/24/philips-tasy-emr-3-06-sql-injection-cve-2021-39375cve-2021-39376/