Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2019-25678

C4G BLIS 3.4 SQL Injection via users_select.php

C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the site parameter. Attackers can send GET requests to the users_select.php endpoint with crafted SQL payloads to extract sensitive database information including patient records and system credentials.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
C4g Gatech
Products
Basic Laboratory Information System Computing For Good\'s Basic Laboratory Information System
CVE-2019-5644

C4G BLIS Improper Access Control

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may alter several facets of a user account, including promoting any user to an administrator.

CVSS 3.1 · 10 Critical EPSS 1.3% KEV · Not listed
Vendors
Gatech
Products
Computing For Good\'s Basic Laboratory Information System
CVE-2019-5643

C4G BLIS Improper Access Control

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may enumerate the user names and facility names in use on a particular installation.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Gatech
Products
Computing For Good\'s Basic Laboratory Information System
CVE-2019-5617

C4G BLIS Improper Access Control

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.4 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may change the password of any administrator-level user.

CVSS 3.1 · 10 Critical EPSS 1.3% KEV · Not listed
Vendors
Gatech
Products
Computing For Good\'s Basic Laboratory Information System