Security Advisory

CVE-2020-27232

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-05-10 19:06:47
Last updated 2024-08-04 16:11:36
Assigner talos
State PUBLISHED

Description

An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.