packetstormsecurity.com
http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMR-SQL-Injection-CSRF-XSS.html CVE-2015-4592
HIGH
eClinicalWorks (CCMR) - Multiple Vulnerabilities
Record summary
CVE-2015-4592 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.
Description
eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBeClinicalWorks (CCMR) - Multiple VulnerabilitiesExploitDB exploitby Jerold HoongNot analyzed1 file
References
420160131 eClinicalWorks (CCMR) - Multiple Vulnerabilitiesmailing list
http://www.securityfocus.com/archive/1/537420/100/0/threaded nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2015-4592 39402exploit
https://www.exploit-db.com/exploits/39402