CVE-2022-3956 | tsruban HHIMS 2.1 Patient Portrait PID sql injection (EUVD-2022-43289)

A vulnerability has been found in tsruban HHIMS 2.1 and classified as critical. The affected element is an unknown function of the component Patient Portrait Handler. The manipulation of the argument PID leads to sql injection. This vulnerability is documented as CVE-2022-3956. The attack can be initiated remotely. There is not any exploit available. Applying a patch is the recommended action to fix this issue.