Vulnerabilities

TI-2012-03642 CVE-2012-4262 · GHSA-m6vq-7f4m-cw3p

Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the (1) name_last, (2) name_first, (3) name_middle, or (4) name_maiden parameter to module…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02385 Published 2012-08-13 No fix listed CWE-79

TI-2012-03641 CVE-2012-4261 · GHSA-2wp6-3qrw-p6q9

SQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows…

LOW 35

SQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01094 Published 2012-08-13 No fix listed CWE-89

TI-2012-03640 CVE-2012-4260 · GHSA-7gx9-p2wj-j239

Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute…

LOW 36

Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1) aktion or (2) callurl parameter to modules/patient/mycare2x_pat_info.php; (3) dept_nr or (4) pid par…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01707 Published 2012-08-13 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to…

SQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows…

Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute…