PicoTronica e-Clinic Healthcare System Hard-Coded Credential Vulnerability in echs.js

A vulnerability in PicoTronica e-Clinic Healthcare System (ECHS) version 5.7 has been identified, involving hard-coded credentials linked to an ADMIN_KEY. This issue arises from an unknown function in the file echs.js, located within the /cdemos/echs/priv/ directory. The vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability leads to the use of hard-coded credentials, potentially allowing unauthorized access or actions within the application.

Remediation

Users can upgrade to version 5.7.1 to address this vulnerability.