Openclinic Ga vulnerabilities
4 known vulnerabilities in Openclinic Ga from Openclinic Ga Project. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
ga: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main.do.
- 7.5 High severity
ga: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp component of OpenClinic GA. By changing the AppointmentUid parameter, an attacker can determine whether a specific app
- 7.5 High severity
openclinic_ga: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to popup.jsp.
- 9.1 Critical severity
openclinic_ga: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchByAjax/patientslistShow.jsp.