← Database

CVE-2021-36351

CRITICAL CVSS: 9.8 Published: 2021-08-06 Modified: 2026-06-17

Description

SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the (1) pday, (2) pmonth, and (3) pyear parameters in GET requests sent to /modules/nursing/nursing-station.php.

Affected Platforms

Care2X Hospital Information Management System

Weakness Type

CWE-89

References