EDB-39402

PoC

eClinicalWorks (CCMR) - Multiple Vulnerabilities

Exploit ansehen Quelle exploit_dbTyp webappsAutor Jerold Hoongveröffentlicht 2016-02-02Katalog exploit_db

ausgenutzte CVEs (4)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2015-4594US	critical9.8	6.24% (93rd)	Exploit	2017-01-10
eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the application does not assign a new session ID, making it possi…
CVE-2015-4593US	high8.8	3.36% (89th)	Exploit	2017-01-10
eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote attackers to hijack the authenti…
CVE-2015-4592US	high8.8	3.35% (89th)	Exploit	2017-01-10
eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious d…
CVE-2015-4591US	medium6.1	5.13% (92nd)	Exploit	2017-01-10
eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to inject arbitrary javascript via…

scry

Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.