CVE:CVE-2021-36352
CNNVD:CNNVD-202108-2388
Care2x Hospital Information Management是一个开源信息管理系统。
Care2x Hospital Information Management 2.7 Alpha 版本存在安全漏洞，该漏洞源于/modules/registrationu admission/patientu register.php页面中发现POST请求，其中包含“nameu middle”、“addru str”、“station”、“nameu maiden”、“nameu 2”、“nameu 3”参数
solution:Upgrade care2x hospital_information_management to a higher version than 2.7:alpha,and avoid the version 2.7:alpha