Loading HuntDB...

GHSA-6ccm-56qr-vvvv

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findSector parameter in ‘‘patientslist.do’ page is vulnerable to authenticated SQL injection An attacker can make an authenticated HTTP request to trigger this vulnerability.

Related CVEs

Key Information

GHSA ID
GHSA-6ccm-56qr-vvvv
Published
May 24, 2022 10:28 PM
Last Modified
May 24, 2022 10:28 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: August 2, 2025 6:46 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.