Browse / drchrono

drchrono

See its reports on the map

What gets reported to drchrono

• Cross-site Scripting4
• Authentication4
• Information Disclosure4
• Cross-Site Request Forgery3
• Access Control2
• Code Execution1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. XML Parser Bug: XXE over which leads to RCECode Injection
   35 votes
2. Stored XSS via AngularJS InjectionCross-site Scripting (XSS) - Generic
   20 votes
3. Request Accepts without X-CSRFToken [ Header - Cookie ]Improper Authentication - Generic
   16 votes
4. Angular injection in the profile name of onpatientCross-site Scripting (XSS) - Generic
   14 votes
5. Information DisclosureInformation Disclosure
   11 votes
6. Create and Update patients vulnerabilityPrivilege Escalation
   11 votes
7. User with no permissions can access full wdcalendar feedImproper Authentication - Generic
   8 votes
8. [CRITICAL] CSRF leading to account take over Cross-Site Request Forgery (CSRF)
   8 votes
9. Security Issue : CSRF Token Design FlawCross-Site Request Forgery (CSRF)
   7 votes
10. User with no permissions can create, edit, delete favorite prescriptions /erx/Improper Authentication - Generic
    6 votes
11. Accessing all appointments vulnerabilityPrivilege Escalation
    6 votes
12. Template stored XSSCross-site Scripting (XSS) - Generic
    5 votes
13. Ngnix Server version disclosureInformation Disclosure
    5 votes
14. node.drchrono.com - Information Disclosure and Windows Host ExposedInformation Disclosure
    4 votes
15. CSRF Add Album On onpatient.com Cross-Site Request Forgery (CSRF)
    4 votes
16. Bug Report Information Disclosure
    3 votes
17. Bypassing Password Reset Improper Authentication - Generic
    3 votes
18. SSL/TLS BEAST ATTACKInformativeCryptographic Issues - Generic
    2 votes
19. XSS in Blog DuplicateCross-site Scripting (XSS) - Generic
    1 votes