Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in PacsOne Server 7.3.9, Premium Edition, Linux x86-64 distribution, the closed-source commercial PACS (medical imaging archive and DICOM server) from RainbowFish Software, California, United States. The product combines a native C++ DICOM and HL7 service with a PHP web interface of 204 endpoints running on MySQL and Apache, fronted by a single Apache alias that maps /pacsone to...