Medicalexpo

medicalexpo

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Ecs Imaging

ecs_imaging

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-3118 1Medicalexpo 1Ecs Imaging Jun 17, 2026 Jan 11, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has multiple SQL Injection issues in the login form and the password-forgotten form (such as /req_password_user.php?email=). This allows an attacker to steal data in...Show more EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has multiple SQL Injection issues in the login form and the password-forgotten form (such as /req_password_user.php?email=). This allows an attacker to steal data in the database and obtain access to the application. (The database component runs as root.) NOTE: This vulnerability only affects products that are no longer supported by the maintainerShow less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-3118

1Medicalexpo

1Ecs Imaging

Jun 17, 2026

Jan 11, 2021

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has multiple SQL Injection issues in the login form and the password-forgotten form (such as /req_password_user.php?email=). This allows an attacker to steal data in the database and obtain access to the application. (The database component runs as root.) NOTE: This vulnerability only affects products that are no longer supported by the maintainerShow less