Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

KiviCare – Clinic & Patient Management System (EHR) — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in KiviCare – Clinic & Patient Management System (EHR), with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2026-2991 KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token CWE-287 7.3 High2026-03-18
CVE-2026-2992 KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard CWE-862 8.2 High2026-03-18
CVE-2026-0927 KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload CWE-862 5.3 Medium2026-01-23
CVE-2025-1572 KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter CWE-89 6.5 Medium2025-02-28
CVE-2024-11729 KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection CWE-89 6.5 Medium2024-12-06
CVE-2024-11730 KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection CWE-89 6.5 Medium2024-12-06
CVE-2024-11728 KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection CWE-89 7.5 High2024-12-06
CVE-2022-0786 KiviCare < 2.3.9 - Unauthenticated SQLi CWE-89 9.8 -2022-06-13

All 8 known CVE vulnerabilities affecting KiviCare – Clinic & Patient Management System (EHR) with full Chinese analysis, references, and POCs where available.