Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:kivicare_–_clinic_&_patient_management_system_(ehr):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductKivicare – Clinic & Patient Management System (Ehr) (41d66db0-7927-5bd7-844d-b43aaad722ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0786 vulnerable 2026-06-08 05:39:11.207416 KiviCare < 2.3.9 - Unauthenticated SQLi
The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some parameters before using them in SQL statements via the ajax_post AJAX action with the get_doctor_details route, leading to SQL Injections exploitable by unauthenticated users
Published: 2022-06-13T12:41:32.000Z
Updated: 2024-08-02T23:40:03.723Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.