TI-2026-63807 CVE-2026-96552 · GHSA-rwxj-v6pm-xj2c
sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt
Priority MEDIUM 45
A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
Vulnerabilities
15 records
TI-2026-63806 CVE-2026-96551 · GHSA-7r9r-jrf7-j7wh
sfturing hosp_order CommonUserController.java cross-site request forgery
Priority MEDIUM 57
A vulnerability was determined in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2026-63805 CVE-2026-96550 · GHSA-x4rm-43rj-crmc
sfturing hosp_order MailUtil.java getProperties cleartext transmission
Priority MEDIUM 61
A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2026-63804 CVE-2026-96549 · GHSA-3rr6-p4hr-wxxx
sfturing hosp_order CommonUserServiceImpl.java cleartext storage
Priority MEDIUM 55
A vulnerability has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2026-63803 CVE-2026-96548 · GHSA-q4vq-73x3-6vmp
sfturing hosp_order jdbc.properties hard-coded credentials
Priority MEDIUM 61
A flaw has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2026-63621 CVE-2026-95396 · GHSA-qm8r-pg3w-7723
sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting
Priority MEDIUM 57
A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2026-59050 CVE-2026-86264 · GHSA-px9h-j3fg-g4vg
sfturing ssm_pro Order Endpoint OrderController.java cross site scripting
Priority MEDIUM 57
A flaw has been found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2026-59049 CVE-2026-86263 · GHSA-rh3j-wjx3-f4rv
sfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization
Priority HIGH 70
A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2026-59048 CVE-2026-86262 · GHSA-9xjg-hg9q-mph7
sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization
Priority HIGH 70
A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2026-59047 CVE-2026-86261 · GHSA-hp37-j4p8-ghjr
sfturing hosp_order Order Controller OrderController.java authorization
Priority HIGH 70
A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2026-59046 CVE-2026-86260 · GHSA-4vjm-63qv-6fj7
sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change
Priority HIGH 70
A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2025-14091 CVE-2025-15450 · GHSA-mf3r-3jp8-f7f5
sfturing hosp_order orderHos findOrderHosNum sql injection
Priority MEDIUM 57
A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2025-06147 CVE-2025-6768 · GHSA-wv25-j2pr-3hfg
sfturing hosp_order HospitalServiceImpl.java findAllHosByCondition sql injection
Priority MEDIUM 57
A vulnerability classified as critical has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2025-06146 CVE-2025-6767 · GHSA-fm5r-cgc3-8773
sfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injection
Priority MEDIUM 57
A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
TI-2025-06145 CVE-2025-6766 · GHSA-7r7v-245v-h8rf
sfturing hosp_order OfficeServiceImpl.java getOfficeName sql injection
Priority MEDIUM 57
A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.