critical9.8
CVE-2021-36351
SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the (1) pday, (2) pmonth, and (3) pyear parameters in GET reque…
Impact
SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the (1) pday, (2) pmonth, and (3) pyear parameters in GET requests sent to /modules/nursing/nursing-station.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Care2x | Hospital Information Management System | through 2.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://securityforeveryone.com/blog/care2x-hospital-information-management-system-0-day-vulnerability-cve-2021-36351
- https://www.exploit-db.com/exploits/50165
- https://securityforeveryone.com/blog/care2x-hospital-information-management-system-0-day-vulnerability-cve-2021-36351
- https://www.exploit-db.com/exploits/50165