Known vulnerabilities in OpenClinic GA

Vendor: Frank Verbeke
Software: OpenClinic GA
Software CPE: cpe:2.3:a:frank_verbeke:openclinic_ga:*:*:*:*:*:*:*:*
Website: https://sourceforge.net/u/frankverbeke/profile/
Total vulnerabilities: 33
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenClinic GA OpenClinic GA is affected by 33 known vulnerabilities: 4 high, 26 medium, 3 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52280 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27226		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52279 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27241		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52278 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27240		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52277 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27239		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52276 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27238		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52275 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27237		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52274 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27236		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52273 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27235		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52272 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27234		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52270 - Command injection
CVE-2020-27227		 CWE-77 High
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52269 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27246		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52268 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27245		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52267 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27244		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52266 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27243		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52265 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27242		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52264 - Incorrect Default Permissions
CVE-2020-27228		 CWE-276 Low
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52263 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27231		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52262 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27230		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52261 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27229		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521
#VU52260 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-27232		 CWE-89 Medium
No
No
 5.187.3 15.04.2021 SB2021041521


Showing elements 1 - 20 out of 33