Clinic Image System vulnerabilities

2 known vulnerabilities in Clinic Image System from Changing. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Clinic Image System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-8858Aug 29, 2025Changing

  Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

• 9.8 Critical severity

  Clinic Image System: Use of Hard-coded Credentials

  CVE-2025-8857Aug 29, 2025Changing

  Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credentials embedded in the source code.