MedDream PACS Premium Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in MedDream PACS Premium version 7.3.6.870. The issue arises in the config.php functionality, where certain parameters can be manipulated to execute arbitrary JavaScript. This vulnerability allows an attacker to craft a URL that, when accessed, triggers the execution of malicious scripts in the victim's browser.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject and execute malicious JavaScript in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a POST request to 'config.php' with one of the vulnerable parameters ('uploaddir', 'archivedir', 'longtermdir', 'thumbnaildir', 'phpexe', 'phpdir', 'worklistsrc', 'imagedir') set to a value that includes JavaScript code, such as a script tag. If the specified directory does not exist, the injected script will be executed when the response is rendered in the browser.

Remediation

Users are advised to update to the patched version released by the vendor.