Threats tagged 'ghsa-rpm6-3gjv-4c3h'

A SQL injection vulnerability exists in the gedelumbung HospitalManagement software in the function generate_index_pasien within application/models/app_global_admin_model.php. The vulnerability is triggered by manipulation of the 'cari' argument and can be exploited remotely. The project uses rolling releases, so specific affected versions are not clearly defined. The issue was reported early but has not yet been addressed by the developers. The vulnerability has a CVSS score of 4.7, indicating low severity.