An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoBuyer parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1208 | Exploit Technical Description Third Party Advisory |
Configurations
Information
Published : 2021-05-11 04:15
Updated : 2022-04-28 19:12
NVD link : CVE-2020-27245
Mitre link : CVE-2020-27245
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
openclinic_ga_project
- openclinic_ga