[0day-rubbish] PacsOne Server 7.3.9 authenticated DICOMweb STOW-RS SOP Instance UID path traversal to www-data code execution on a PACS host (7.2)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-15 07:42 UTC
Importiert: 2026-10-20 19:12 UTC
Quelle-ID: full_disc
uid_hash: aad73e038aeb6261102bba16b3bac0ce02230b67267cd640965ed6822a81f3c2

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability in PacsOne

Server 7.3.9, Premium Edition, Linux x86-64 distribution, the closed-source

commercial PACS (medical imaging archive and DICOM server) from RainbowFish

Software, California, United States. The product combines a native C++ DICOM

and HL7 service with a PHP web interface of 204 endpoints running on MySQL

and Apache, fronted by a single Apache alias that maps /pacsone to...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss