Santesoft Sante PACS Server

This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the login endpoint. When parsing the username element, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-17331.

Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability

Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability

Santesoft Sante PACS Server Stack-based Buffer Overflow

Santesoft Sante PACS Server Cleartext Transmission of Sensitive Information

Santesoft Sante PACS Server Double Free

Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability

Santesoft Sante PACS Server Path Traversal Information Disclosure

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability

Santesoft Sante PACS Server Cross-site Scripting

Santesoft Sante PACS Server Cross-site Scripting

Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability

Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability