CVE-2013-4619

2013-08-0921:00:00

mitre

www.cve.org

openemr

sql injection

remote authenticated users

arbitrary sql commands

custom report range

chart tracker

cve-2013-4619

AI Score

8.1

Confidence

Low

EPSS

0.002

Percentile

58.2%

JSON

Multiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) start or (2) end parameter to interface/reports/custom_report_range.php, or the (3) form_newid parameter to custom/chart_tracker.php.