EDB-39402

PoC

eClinicalWorks (CCMR) - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor Jerold Hoongpublished 2016-02-02catalog exploit_db

exploited CVEs (4)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2015-4594US	critical9.8	6.24% (93rd)	Exploit	2017-01-10
eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the application does not assign a new session ID, making it possi…
CVE-2015-4593US	high8.8	3.36% (89th)	Exploit	2017-01-10
eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote attackers to hijack the authenti…
CVE-2015-4592US	high8.8	3.35% (89th)	Exploit	2017-01-10
eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious d…
CVE-2015-4591US	medium6.1	5.13% (92nd)	Exploit	2017-01-10
eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to inject arbitrary javascript via…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.