TI-2021-16275 CVE-2021-38705 · GHSA-hc37-45rc-736p
ClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF).
Priority LOW 39
ClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF).
Vulnerabilities
4 records
TI-2021-16274 CVE-2021-38704 · GHSA-6qqr-9g87-rcp3
Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow…
Priority LOW 33
Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL.
TI-2021-16277 CVE-2021-38707 · GHSA-jp5m-9hr9-82w2
Persistent cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow…
Priority LOW 25
Persistent cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce arbitrary JavaScript to account parameters.
TI-2021-16276 CVE-2021-38706 · GHSA-jccf-vqp8-v3mm
messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability…
Priority MEDIUM 40
messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged attackers to execute arbitrary SQL commands through a vulnerable parameter.