CVE-2023-33481

RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-11-07

Last modified

2024-09-05

Weaknesses

CWE-89

Affected products

• Remote Clinic (Remoteclinic)

References

• https://github.com/remoteclinic/RemoteClinic/issues/25