CVE-2020-14493: Openclinic Ga Project Openclinic Ga

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A low-privilege user may use SQL syntax to write arbitrary files to the OpenClinic GA 5.09.02 and 5.89.05b server, which may allow the execution of arbitrary commands.

Affected products

• Openclinic Ga Project Openclinic Ga: version 5.09.02 only; version 5.89.05b only

Published 2020-07-29. Last modified 2026-06-17.