care2x

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

care2x records in CISA KEV

No care2x vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Care2x 2 records MEDIUM 2g 1 record LOW Hospital Information Management 1 record LOW Hospital Information Management System 1 record MEDIUM

Records

2 records in Care2x · all components

TI-2007-01400 CVE-2007-1458 · GHSA-2qj4-m7p4-848p

Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers…

MEDIUM 40

Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) inc_checkdate_lang.php, (2) inc_charset_fx.php, (3) inc_co…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.07246 Published 2007-03-14 No fix listed

TI-2007-01515 CVE-2007-1574 · GHSA-c8cv-jxxq-p694

CARE2X 2.2, and possibly earlier, allows remote attackers to obtain configuration…

LOW 25

CARE2X 2.2, and possibly earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01118 Published 2007-03-21 No fix listed

Open these records in search →

Critical	1
High	2
Medium	3
Low	0
No CVSS	0