critical9.8
CVE-2022-48152
SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicine…
Impact
SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Remoteclinic | Remote Clinic | Version 2.0 |