Le-yan vulnerabilities
We track 5 vulnerabilities in Le-yan products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.
Latest Le-yan vulnerabilities
- 8.8 High severity
Medical Practice Management System: Improper Verification of Source of a Communication Channel
Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page.
- 9.8 Critical severity
Le-show: Improper Neutralization of Special Elements used in an SQL Command
Le-show medical practice management system from Le-yan has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
- 9.8 Critical severity
Personnel and Salary Management System: Use of Hard-coded Credentials
Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service.
- 9.8 Critical severity
Dental Management System: Use of Hard-coded Credentials
The Le-yan dental management system contains a hard-coded credentials vulnerability in the web page source code, which allows an unauthenticated remote attacker to acquire administrator’s privilege and control the system or disrupt service.
- 9.8 Critical severity
Dental Management System: Improper Neutralization of Special Elements used in an SQL Command
The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator’s privilege and perform arbitrary operations on the system o