MedDream PACS Premium Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in MedDream PACS Premium version 7.3.6.870, specifically within the modifyAeTitle functionality. This vulnerability allows an attacker to execute arbitrary JavaScript by crafting a malicious URL. The issue arises because the 'title' parameter in the Pacs/modifyAeTitle.php script is not properly sanitized before being outputted as HTML. When a crafted title is used, the application responds with an error message that includes the injected script, demonstrating the execution of the JavaScript code.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject and execute malicious JavaScript in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a GET request to the Pacs/modifyAeTitle.php endpoint with a crafted 'title' parameter that includes JavaScript code, such as a script tag containing JavaScript. The response will include the injected script executed as part of the HTML, indicating successful exploitation.

Remediation

Users are advised to update to the patched version released by the vendor on December 5, 2025.