Exposed log files on the website of a Swiss software development company
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
Vulnerability Hub
The National Test Institute for Cybersecurity NTC regularly conducts independent and neutral security tests of networked infrastructures, devices and applications. Vulnerability disclosure ensures a relevant impact on society, and serves our commitment to Switzerland's security and digital sovereignty.
The Vulnerability Hub lists the most relevant vulnerabilities identified by the NTC, free and open. Further details about the products tested and the vulnerabilities identified may be provided on a case-by-case basis. Please use the contact form.
Please note that the following list is only a selection of NTC's work.
94 Results
List
Vulnerability
Area
Criticality
Status
Published on
Exposed Symfony profiler on a Swiss health insurance company website
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed database backup on a Swiss dental implant manufacturer's website
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Symfony debug bar exposed on a Swiss orthopaedic centre's website
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed debug log on a Laravel instance on the website of a Swiss hospital
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed .git repository on the website of a Swiss hospital
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
SQL injection on a web app of a Swiss software development company
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed .git repository on several websites of a Swiss care network
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
SQL injection on the website of a Swiss medical practice
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
Exposed log files on the website of a Swiss care network
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
SQL injection on a Swiss hospital’s website
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
SQL injection on a Swiss medical device manufacturer’s website
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed Spring Boot Actuator on a Swiss software development company’s website
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
SQL injections in the cloud-based medical practice solution of a Swiss company
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed administrator interface on the website of a Swiss medical clinic
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed log file on the website of a Swiss medical society
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
Exposed database backup file on the website of a Swiss hospital
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed admin password of a Swiss IT service provider’s Swiss health database
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed debugging tools of a Swiss IT service provider’s web application
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
SQL injection in a Swiss IT service provider’s Swiss health database web application
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Remote code execution in a web application of a Swiss IT service provider
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed data export files of a Swiss health database of a Swiss IT service provider
Area: Swiss Health Sector
Criticality: low
Status: fixed
Published on 2024-06-20
Reflected XSS on a Swiss hospital’s website
Area: Swiss Health Sector
Criticality: low
Status: fixed
Published on 2024-06-20
Exposed Symfony profiler on the development site of a Swiss IT service provider
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
Exposed debug log on a Laravel instance on a Swiss IT service provider’s website
Area: Swiss Health Sector
Criticality: low
Status: fixed
Published on 2024-06-20