CVE-2023-29863

Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem:statement parameter in the WSDL files.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-05-11

Last modified

2026-07-09

Weaknesses

CWE-89

Affected products

• Weblab (Medisys)

References

• https://medium.com/@waadalbyalii5/sql-injection-in-wsdl-file-c66fa00042f5
• https://medium.com/%40waadalbyalii5/sql-injection-in-wsdl-file-c66fa00042f5