CVE-2022-48152 - SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php

Back Back to CVE browser

CRITICAL

SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php

Published Jan 20, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.79%

Description

SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (1)

https://github.com/remoteclinic/RemoteClinic/issues/20
ExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://github.com/remoteclinic/RemoteClinic/issues/20		ExploitIssue TrackingThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 20, 2023

Updated Apr 3, 2025

Reserved Dec 29, 2022

Link CVE-2022-48152

CISA Vulnrichment

Updated Apr 3, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-48152

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-48152

ENISA EUVD

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a