Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Imaster Clear all filters
TI-2025-27357 CVE-2025-41004 · GHSA-qc32-mjp2-qfv5

Multiple vulnerabilities in Imaster products Open configuration options

Priority MEDIUM 45

Imaster's Patient Records Management System is vulnerable to SQL Injection in the endpoint ‘/projects/hospital/admin/complaints.php’ through the ‘id’ parameter.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00298 Published 2026-01-12 No fix listed CWE-89
TI-2025-27356 CVE-2025-41003 · GHSA-3gxp-j77p-vmqh

Multiple vulnerabilities in Imaster products Open configuration options

Priority LOW 23

Imaster's Patient Record Management System contains a stored Cross-Site Scripting (XSS) vulnerability in the endpoint ‘/projects/hospital/admin/edit_patient.php’.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00273 Published 2026-01-12 No fix listed CWE-79