Changing Clinic Image System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Changing Clinic Image System: 2 record(s), with affected versions and fixes.
CVE-2025-8858
High · 7.5
CWE-89 Aug 29, 2025
Changing|Clinic Image System - SQL Injection
Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.
CVE-2025-8857
Critical · 9.8
CWE-798 Aug 29, 2025
Changing|Clinic Image System - Use of Hard-coded Credentials
Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credentials embedded in the source code.