Filtered by vendor Librehealth
Subscriptions
Filtered by product Librehealth Ehr
Subscriptions
Total
22 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-29938 | 1 Librehealth | 1 Librehealth Ehr | 2024-08-03 | 8.8 High |
| In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface\billing\new_payment.php via interface\billing\payment_master.inc.php leads to SQL injection. | ||||
| CVE-2022-29940 | 1 Librehealth | 1 Librehealth Ehr | 2024-08-03 | 5.4 Medium |
| In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\find_order_popup.php leads to multiple cross-site scripting (XSS) vulnerabilities. | ||||