Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-8858

Changing｜Clinic Image System - SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Changing Clinic Image System

Default version status: unaffected

  • 0 to ≤ 2.4.23.2131affected
  • 1.5.*affected
  • 2.0.*affected

References