CVE-2022-29938

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface\billing\new_payment.php via interface\billing\payment_master.inc.php leads to SQL injection.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/LibreHealthIO/lh-ehr/tagsThird Party Advisory
https://gitlab.com/librehealth/ehr/lh-ehr/-/tagsThird Party Advisory
https://nitroteam.kz/index.php?action=researches&slug=librehealth_rExploit, Third Party Advisory
https://github.com/LibreHealthIO/lh-ehr/tagsThird Party Advisory
https://gitlab.com/librehealth/ehr/lh-ehr/-/tagsThird Party Advisory
https://nitroteam.kz/index.php?action=researches&slug=librehealth_rExploit, Third Party Advisory

Timeline

Published: May 5, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-299395.4In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sl_eob_process.php leads to multip CVE-2022-299405.4In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\find_order_popup.php leads to mu CVE-2022-299426.5Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perfor CVE-2022-299436.5Talend Administration Center has a vulnerability that allows an authenticated user to use XML External Entity (XXE) processing to achieve re CVE-2022-299445.3An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing intents does not redirect CVE-2022-299457.5DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope CVE-2022-299466.3NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security restrictions, caused by CVE-2022-299476.1Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.CVE-2022-299484.6Due to an insecure design, the Lepin EP-KP001 flash drive through KP001_V19 is vulnerable to an authentication bypass attack that enables an CVE-2022-29957.1Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data CVE-2022-299504.3Experian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via the (1) rule name parameter to the Rules pag CVE-2022-299519.1JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol (configurable on ports 1024-65534 on e