eClinicalWorks Patient Portal 7.0
Approved changes feed: RSS · Atom
cpe:2.3:a:eclinicalworks:patient_portal:7.0:*:*:*:*:*:*:*
part: a version: 7.0 update: *
| Vendor | Eclinicalworks (a153b582-89f3-555e-a8ca-96af0885ceeb) |
|---|---|
| Product | Patient Portal (64dcf0fe-6d17-51e7-a9de-8bcee95384f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-5599 |
vulnerable | 2026-06-08 05:09:47.314768 |
Details available
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a reflected Cross Site Scripting vulnerability which affects the raceMasterList.jsp page within the Patient Portal. Inserted payload is rendered within the Patient Portal and the raceMasterList.jsp page does not require authentication. The vulnerability can be used to extract sensitive information or perform attacks against the user's browser. The vulnerability affects the raceMasterList.jsp page and the following parameter: race.
Published: 2017-01-27T10:10:00.000Z
Updated: 2024-08-05T15:04:15.455Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5570 |
vulnerable | 2026-06-08 05:09:47.214841 |
Details available
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the messageJson.jsp, which can only be exploited by authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile().
Published: 2017-01-23T17:00:00.000Z
Updated: 2024-08-05T15:04:15.324Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5569 |
vulnerable | 2026-06-08 05:09:47.214438 |
Details available
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the template.jsp, which can be exploited without the need of authentication and via an HTTP POST request, and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile().
Published: 2017-01-23T17:00:00.000Z
Updated: 2024-08-05T15:04:15.364Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.