Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.asp. NOTE: this was originally reported as a SQL injection vulnerability, but this may be inaccurate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EPIC MyChart SQL注入漏洞
Vulnerability Description
EPIC MyChart是意大利EPIC公司的一套用于医疗体系的患者管理软件。该软件支持患者资料管理和在线预约等功能。 EPIC MyChart中存在SQL注入漏洞。远程攻击者可通过向help.asp文件发送‘topic’参数利用该漏洞执行任意的SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A