CVE

CVE-2022-29938

CVE-2022-29938

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interfacebillingnew_payment.php via interfacebillingpayment_master.inc.php leads to SQL injection.

Source: CVE-2022-29938

Exit mobile version