Advisories · Technology
sfturing hosp_order.
Every CVE that names sfturing hosp_order among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt
- sfturing hosp_order
- CWE-325
- CWE-759
- CVSS 5.3 Medium
sfturing hosp_order CommonUserController.java cross-site request forgery
- sfturing hosp_order
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 6.3 Medium
sfturing hosp_order MailUtil.java getProperties cleartext transmission
- sfturing hosp_order
- Weak cryptography or TLS
- CWE-310
- CVSS 4.8 Medium
sfturing hosp_order CommonUserServiceImpl.java cleartext storage
- sfturing hosp_order
- Information disclosure
- CWE-310
- CVSS 6.3 Medium
sfturing hosp_order jdbc.properties hard-coded credentials
- sfturing hosp_order
- Hard-coded credentials
- CVSS 5.3 Medium
sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting
- sfturing hosp_order
- Cross-site scripting (XSS)
- Code injection
- CVSS 6.9 Medium
sfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization
- sfturing hosp_order
- Broken access control
- CVSS 6.9 Medium
sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization
- sfturing hosp_order
- Broken access control
- CVSS 6.9 Medium
sfturing hosp_order Order Controller OrderController.java authorization
- sfturing hosp_order
- Broken access control
- CVSS 6.9 Medium
sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change
- sfturing hosp_order
- CWE-620
- CWE-640
- CVSS 5.3 Medium
sfturing hosp_order orderHos findOrderHosNum sql injection
- sfturing hosp_order
- Other injection
- SQL injection
- CVSS 5.3 Medium
sfturing hosp_order HospitalServiceImpl.java findAllHosByCondition sql injection
- sfturing hosp_order
- Other injection
- SQL injection
- CVSS 5.3 Medium
sfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injection
- sfturing hosp_order
- Other injection
- SQL injection
- CVSS 5.3 Medium
sfturing hosp_order OfficeServiceImpl.java getOfficeName sql injection
- sfturing hosp_order
- Other injection
- SQL injection