Sql injection

2021-09-0720:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

JSON

messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged attackers to execute arbitrary SQL commands through a vulnerable parameter.

CPENameOperatorVersion
cliniccaseseq7.3.3

CPE	Name	Operator	Version
	cliniccases	eq	7.3.3

References

cliniccases.com

github.com/judsonmitchell/ClinicCases/releases