CVE-2020-11437
LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database.
Date published : 2020-07-15
https://know.bishopfox.com/advisories
https://labs.bishopfox.com/advisories/librehealth-version-2.0.0-0