← back
CVE-2015-4592

CVE-2015-4592

EPSS 3.3%
eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMR-SQL-Injection-CSRF-XSS.htmlunverifiedcve_referencewww.exploit-db.com/exploits/39402/unverifiedexploitdbwww.exploit-db.com/exploits/39402unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMR-SQL-Injection-CSRF-XSS.htmlhttps://www.exploit-db.com/exploits/39402/http://www.securityfocus.com/archive/1/537420/100/0/threaded