packetstormsecurity.com
http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMR-SQL-Injection-CSRF-XSS.html CVE-2015-4593
HIGH
eClinicalWorks (CCMR) - Multiple Vulnerabilities
Record summary
CVE-2015-4593 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.
Description
eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for requests that could lead to the creation, modification and deletion of users, appointments and employees.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBeClinicalWorks (CCMR) - Multiple VulnerabilitiesExploitDB exploitby Jerold HoongNot analyzed1 file
References
420160131 eClinicalWorks (CCMR) - Multiple Vulnerabilitiesmailing list
http://www.securityfocus.com/archive/1/537420/100/0/threaded nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2015-4593 39402exploit
https://www.exploit-db.com/exploits/39402