Approved changes feed: RSS · Atom

cpe:2.3:a:c4g:basic_laboratory_information_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorC4G (b7e64820-dc0a-527f-a1d5-69bb6002a1da)
ProductBasic Laboratory Information System (fd92780f-e2a5-5c24-ae37-c14b7230423d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25678 vulnerable 2026-06-08 05:13:42.763825 C4G BLIS 3.4 SQL Injection via users_select.php
HIGH (8.2)
C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the site parameter. Attackers can send GET requests to the users_select.php endpoint with crafted SQL payloads to extract sensitive database information including patient records and system credentials.
Published: 2026-04-05T20:45:29.306Z
Updated: 2026-04-06T15:08:02.506Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.