CVE:CVE-2020-11437
CNNVD:CNNVD-202007-1101
LibreHealth EMR是LibreHealth开源的一款电子病历。
LibreHealth EMR 2.0.0版本中存在SQL注入漏洞。攻击者利用该漏洞枚举数据库。
solution:Upgrade librehealth librehealth_ehr to a higher version than 2.0.0,and avoid the version 2.0.0