CVE-2021-38706

Publication date

2021-09-07 19:13:15

Family

mitre

State

PUBLISHED

Description

messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged attackers to execute arbitrary SQL commands through a vulnerable parameter.