What’s Vulnerable › Products

sfturing hosp_order vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your sfturing hosp_order version is affected

Latest sfturing hosp_order vulnerabilities

• CVE-2026-96552 — sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt (CVSS 3.1)
• CVE-2026-96551 — sfturing hosp_order CommonUserController.java cross-site request forgery (CVSS 4.3)
• CVE-2026-96550 — sfturing hosp_order MailUtil.java getProperties cleartext transmission (CVSS 3.7)
• CVE-2026-96549 — sfturing hosp_order CommonUserServiceImpl.java cleartext storage (CVSS 3.3)
• CVE-2026-96548 — sfturing hosp_order jdbc.properties hard-coded credentials (CVSS 5.6)
• CVE-2026-95396 — sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting (CVSS 4.3)
• CVE-2026-86263 — sfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization (CVSS 7.3)
• CVE-2026-86262 — sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization (CVSS 7.3)
• CVE-2026-86261 — sfturing hosp_order Order Controller OrderController.java authorization (CVSS 7.3)
• CVE-2026-86260 — sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change (CVSS 6.5)
• CVE-2025-15450 — sfturing hosp_order orderHos findOrderHosNum sql injection (CVSS 6.3)
• CVE-2025-6768 — sfturing hosp_order HospitalServiceImpl.java findAllHosByCondition sql injection (CVSS 6.3)
• CVE-2025-6767 — sfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injection (CVSS 6.3)
• CVE-2025-6766 — sfturing hosp_order OfficeServiceImpl.java getOfficeName sql injection (CVSS 8.8)