CVE-2020-28939 - CVE House
Back to Database
Status published High CVE-2020-28939

OpenClinic version 0.8.2 is affected by a medical/test_new.php insecure file...

Vulnerability Description

OpenClinic version 0.8.2 is affected by a medical/test_new.php insecure file upload vulnerability. This vulnerability allows authenticated users (with substantial privileges) to upload malicious files, such as PHP web shells, which can lead to arbitrary code execution on the application server.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-28939

Credits & Attribution

No credits recorded in the NVD database.

References

More from openclinic project

View All →
CVE-2020-28938
OpenClinic version 0.8.2 is affected by a stored XSS vulnerability...
Medium 5.4
CVE-2020-28937
OpenClinic version 0.8.2 is affected by a missing authentication vulnerability...
High 7.5
CVE-2020-20444
Jact OpenClinic 0.8.20160412 allows the attacker to read server files...
High 7.2

Affected Vendor

openclinic project

View all reports →

Affected Software

openclinic
Vulnerable Versions:
0.8.2

Timeline

Official Publish: December 3rd, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.