CVE-2024-11730 — SQL Injection in Kivicare

CWE-89 — SQL Injection3 documents3 sources

Severity

6.5MEDIUMNVD

EPSS

0.3%

top 44.26%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Iqonic Kivicare Iqonicdesign Kivicare Clinic Patient Management System

Timeline

PublishedDec 6

Description

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the 'sort[]' parameter of the static_data_list AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with doctor/receptionist-level access and above, to append additional SQL queries into already existing queries…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5iqonicdesign/kivicare_clinic_patient_management_system3.6.4

▶NVDiqonic/kivicare< 3.6.5

Patches

Patch: plugins.trac.wordpress.org ↗

🔴Vulnerability Details

GHSA

GHSA-927m-f5pr-jw25: The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the 'sort[]' parameter of the static_d↗2024-12-06

▶

CVEList

KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection↗2024-12-06

▶