Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un-authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique, such as select_loadfile(). The vulnerability affects the EmployeePortalServlet page and the following parameter: employer.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
eClinicalWorks healow@work SQL注入漏洞
Vulnerability Description
eClinicalWorks healow@work是美国eClinicalWorks公司的一款应用于医疗领域的产品，该产品为医生提供了一套共享健康记录的平台。 eClinicalWorks healow@work 8.0 build 8版本中的EmployeePortalServlet页面存在SQL注入漏洞。攻击者可通过发送HTTP POST请求利用该漏洞将数据库转储到恶意服务器上。
CVSS Information
N/A
Vulnerability Type
N/A