CVE-2015-4592 eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as....
HighCVSS 8.8
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eclinicalworks population health | All versions | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20160131 eClinicalWorks (CCMR) - Multiple Vulnerabilities exploit mailing-list third-party-advisory vdb-entry
- 39402 exploit third-party-advisory vdb-entry