Description
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface\billing\new_payment.php via interface\billing\payment_master.inc.php leads to SQL injection.
Unscored
CVE-2022-29938
EUVD-2022-34247GHSA-c246-grxw-5q23
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface\billing\new_payment.php via interface\billing\p…
Published May 5, 2022 · Updated Aug 3, 2024 · Assigned by mitre