CVEvulnerability
CVE-2015-4592
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-01-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input.
Affected configurations
• eclinicalworks population health
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMR-SQL-Injection-CSRF-XSS.html Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/537420/100/0/threaded Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/39402/ Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMR-SQL-Injection-CSRF-XSS.html Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/537420/100/0/threaded Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/39402/ Exploit, Third Party Advisory, VDB Entry