Executive brief
MedDream PACS Server Premium, a system used by healthcare facilities to store and manage medical imaging like X-rays and MRIs, contains a security flaw in its user registration page. An unauthenticated attacker can use this flaw to run unauthorized commands against the system's database. This could allow an attacker to steal sensitive patient data or medical records, potentially leading to significant privacy breaches and regulatory non-compliance.
Technical details
An SQL injection vulnerability exists in MedDream PACS Server Premium version 6.7.1.1 due to improper neutralization of special elements in the 'email' parameter of the userSignup.php endpoint. An unauthenticated remote attacker can exploit this by sending a crafted POST request containing malicious SQL payloads. Successful exploitation allows the attacker to execute arbitrary queries against the backend MySQL database, enabling the extraction of sensitive information such as user credentials and medical database records. The vulnerability was publicly documented with functional exploit code using tools like sqlmap.
Affected products
- MedDream PACS Server Premium 6.7.1.1
Timeline
- 2018-05-23: other: Vulnerability discovered by researcher
- 2018-09-07: disclosed: Exploit published on Exploit-DB
- 2026-05-25: advisory: NVD/VulnCheck advisory published