CVE-2020-20797

FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php...

CVE-2020-20797: Improper Neutralization of Special Elements used in an SQL Command

FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php...

PT-2021-10544

Name of the Vulnerable Software and Affected Versions: FlameCMS version 3.3.5 Description: The issue is a time-based blind SQL injection vulnerability. It is located in the /account/register.php endpoint. Recommendations: For FlameCMS version 3.3.5, consider disabling the /account/register.php...

CVE-2018-15152

Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access 1 portal/addediteventuser.php, 2 portal/findapptpopupuser.php, 3 portal/getallergies.php, 4 portal/getamendments.php, 5 portal/getlabresults.php, 6...

CVE-2018-15152: Improper Authentication

Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access 1 portal/addediteventuser.php, 2 portal/findapptpopupuser.php, 3 portal/getallergies.php, 4 portal/getamendments.php, 5 portal/getlabresults.php, 6...