Vulnerability Details CVE-2021-3118
EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has multiple SQL Injection issues in the login form and the password-forgotten form (such as /req_password_user.php?email=). This allows an attacker to steal data in the database and obtain access to the application. (The database component runs as root.) NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2021-3118
-
cpe:2.3:a:medicalexpo:ecs_imaging:-
-
cpe:2.3:a:medicalexpo:ecs_imaging:6.21.3
-
cpe:2.3:a:medicalexpo:ecs_imaging:6.21.5