High severity8.8NVD Advisory· Published Sep 7, 2021· Updated Jun 17, 2026
CVE-2021-38706
CVE-2021-38706
Description
messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged attackers to execute arbitrary SQL commands through a vulnerable parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<7.3.3+ 2 more
- (no CPE)range: <7.3.3
- (no CPE)
- cpe:2.3:a:cliniccases:cliniccases:7.3.3:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- cliniccases.comnvdVendor Advisory
- github.com/judsonmitchell/ClinicCases/releasesnvdRelease NotesThird Party Advisory
News mentions
0No linked articles in our index yet.