Vulnerabilidades do MedDream Pacs Server
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam MedDream Pacs Server: 30 registro(s), com versões afetadas e correções.cpe:2.3:a:meddream:pacs_server
CVE-2020-37009
Alta · 8.8
CWE-434 29/01/2026
MedDream PACS Server 6.8.3.751 - Remote Code Execution
MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized users to upload malicious PHP files. Attackers can exploit the uploadImage.php endpoint by authenticating and uploading a PHP shell to execute arbitrary system commands with elevated privileges.
CVE-2025-58095
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the imagedir parameter.
CVE-2025-58094
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the worklistsrc parameter.
CVE-2025-58093
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the phpdir parameter.
CVE-2025-58092
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the phpexe parameter.
CVE-2025-58091
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the thumbnaildir parameter.
CVE-2025-58090
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the uploaddir parameter.
CVE-2025-58089
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the longtermdir parameter.
CVE-2025-58088
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the archivedir parameter.
CVE-2025-58087
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the status parameter.
CVE-2025-58080
Média · 5.4
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-57881
Média · 5.4
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-57787
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-57786
Média · 5.4
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-55071
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-54861
Média · 5.4
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-54853
Média · 5.4
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-54852
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-54817
Média · 5.4
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a URL to a malicious website to trigger this vulnerability.
CVE-2025-54814
Média · 5.4
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-54778
Média · 5.4
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-54495
Média · 5.4
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-54157
Média · 5.4
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-53912
Alta · 8.1
CWE-73 20/01/2026
An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of…
An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send http request to trigger this vulnerability.
CVE-2025-53854
Média · 5.4
CWE-79 20/01/2026
Cross-site Scripting (XSS) em MedDream Pacs Server
A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.