← Database

CVE-2022-48152

CRITICAL CVSS: 9.8 Published: 2023-01-20 Modified: 2026-06-17

Description

SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php.

Affected Platforms

Remoteclinic Remote Clinic

Weakness Type

CWE-89, CWE-89

References