Le-show medical practice management system from Le-yan has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/en/cp-139-10086-dbfd0-2.html | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-10085-69e16-1.html | Third Party Advisory |
Configurations
History
07 May 2025, 16:50
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Le-show le-yan
Le-show |
|
| References | () https://www.twcert.org.tw/en/cp-139-10086-dbfd0-2.html - Third Party Advisory | |
| References | () https://www.twcert.org.tw/tw/cp-132-10085-69e16-1.html - Third Party Advisory | |
| CPE | cpe:2.3:a:le-show:le-yan:*:*:*:*:*:*:*:* |
02 May 2025, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-02 04:15
Updated : 2025-05-07 16:50
NVD link : CVE-2025-3708
Mitre link : CVE-2025-3708
JSON object : View
Products Affected
le-show
- le-yan
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')