high8.8
CVE-2020-14493
A low-privilege user may use SQL syntax to write arbitrary files to the OpenClinic GA 5.09.02 and 5.89.05b server, which may allow the execution of arbitrary c…
Impact
A low-privilege user may use SQL syntax to write arbitrary files to the OpenClinic GA 5.09.02 and 5.89.05b server, which may allow the execution of arbitrary commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openclinic Ga Project | Openclinic Ga | Versions 5.09.02, 5.89.05b |