VYPR

Care2x Hospital Information System

by Care2x

CVEs (1)

  • CVE-2019-25728HigJun 4, 2026
    risk 0.53cvss 8.2epss 0.00

    Care2x 2.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by manipulating the ck_config cookie parameter. Attackers can inject malicious SQL through the ck_config cookie in multiple endpoints including…