open-emr openemr vulnerabilities and exploits

(subscribe to this query)

interface/globals.php in OpenEMR 2.x, 3.x, and 4.x prior to 4.2.0 patch 2 allows remote malicious users to bypass authentication and obtain sensitive information via an ignoreAuth=1 value to certain scripts, as demonstrated by (1) interface/fax/fax_dispatch_newpid.php and (2) int...

Open-emr Openemr 3.0.1 Open-emr Openemr 3.1.0 Open-emr Openemr 4.1.0 Open-emr Openemr 4.1.1 Open-emr Openemr 2.8.3 Open-emr Openemr 2.9.0 Open-emr Openemr 4.1.2 Open-emr Openemr 4.2.0 Open-emr Openemr 3.2.0 Open-emr Openemr 4.0.0

SQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly earlier allows remote malicious users to execute arbitrary SQL commands via the u parameter.

Open-emr Openemr 4.0.0 Open-emr Openemr 3.2.0 Open-emr Openemr 3.1.0 Open-emr Openemr

1 EDB exploit

Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote malicious users to execute arbitrary PHP code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the pat...

Open-emr Openemr 4.0.0 Open-emr Openemr 4.1.1 Open-emr Openemr 4.1.0

1 EDB exploit

Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote malicious users to inject arbitrary web script or HTML via the site parameter.

Open-emr Openemr 4.0.0 Open-emr Openemr 4.1.1 Open-emr Openemr 4.1.0

2 EDB exploits

Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.

Open-emr Openemr 5.0.2 Phpgacl Project Phpgacl 3.3.7 Open-emr Openemr 6.0.0

Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr before 7.0.0.2.

Open-emr Openemr

Code Injection in GitHub repository openemr/openemr before 7.0.1.

Open-emr Openemr

Missing Authorization in GitHub repository openemr/openemr before 7.0.1.

Open-emr Openemr

Improper Access Control in GitHub repository openemr/openemr before 7.0.1.

Open-emr Openemr

Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr before 7.0.1.

Open-emr Openemr

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook