high7.2
CVE-2020-20444
Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/view…
Impact
Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/view_source.php' which "could" lead to RCE vulnerability .
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openclinic Project | Openclinic | Version 0.8.20160412 |