Computing For Good'S Basic Laboratory Information System
Approved changes feed: RSS · Atom
cpe:2.3:a:gatech:computing_for_good\'s_basic_laboratory_information_system:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Gatech (9c921e27-f48d-5a2a-9416-af4365472bbe) |
|---|---|
| Product | Computing For Good'S Basic Laboratory Information System (7b83a6eb-eaed-5d8b-a18c-099691d10376) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-5644 |
vulnerable | 2026-06-08 05:14:07.921977 |
C4G BLIS Improper Access Control
CRITICAL (10)
Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may alter several facets of a user account, including promoting any user to an administrator.
Published: 2019-11-06T18:30:43.639Z
Updated: 2024-09-16T22:41:06.846Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5643 |
vulnerable | 2026-06-08 05:14:07.921598 |
C4G BLIS Improper Access Control
MEDIUM (5.3)
Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may enumerate the user names and facility names in use on a particular installation.
Published: 2019-11-06T18:30:43.187Z
Updated: 2024-09-16T19:14:34.337Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5617 |
vulnerable | 2026-06-08 05:14:07.870855 |
C4G BLIS Improper Access Control
CRITICAL (10)
Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.4 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may change the password of any administrator-level user.
Published: 2019-11-06T18:30:42.339Z
Updated: 2024-09-17T02:21:04.696Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25678 |
vulnerable | 2026-06-08 05:13:42.764548 |
C4G BLIS 3.4 SQL Injection via users_select.php
HIGH (8.2)
C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the site parameter. Attackers can send GET requests to the users_select.php endpoint with crafted SQL payloads to extract sensitive database information including patient records and system credentials.
Published: 2026-04-05T20:45:29.306Z
Updated: 2026-04-06T15:08:02.506Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.