Published: 07/02/2012 Updated: 29/08/2017

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

VMScore: 365

Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N

Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openemr openemr 4.1.0

source: wwwsecurityfocuscom/bid/51788/info OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input A remote attacker can exploit these issues to execute arbitrary shell commands with the privileges of the user running the application, obtain potentially sensi ...

source: wwwsecurityfocuscom/bid/51788/info OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input A remote attacker can exploit these issues to execute arbitrary shell commands with the privileges of the user running the application, obtain potentially s ...

source: wwwsecurityfocuscom/bid/51788/info OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input A remote attacker can exploit these issues to execute arbitrary shell commands with the privileges of the user running the application, obtain potentially sen ...

CWE-22 http://osvdb.org/78729 http://www.securityfocus.com/bid/51788 http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.html http://osvdb.org/78730 http://www.open-emr.org/wiki/index.php/OpenEMR_Patches https://www.htbridge.ch/advisory/HTB23069 http://osvdb.org/78728 http://secunia.com/advisories/47781 http://osvdb.org/78727 https://exchange.xforce.ibmcloud.com/vulnerabilities/72914 https://nvd.nist.gov https://www.exploit-db.com/exploits/36648/

CVE-2012-0991

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect