ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-27244”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-27244
Published
2021-05-11
CVSS:
6.4
ShadowTrackr CVSS:
5.2
Summary:
An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoCode parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.