2 matches found
CVE-2020-20797: Improper Neutralization of Special Elements used in an SQL Command
FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php...
9.8CVSS5.8AI score0.01116EPSS
SaveExploits1References2
CVE-2018-15152: Improper Authentication
Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access 1 portal/addediteventuser.php, 2 portal/findapptpopupuser.php, 3 portal/getallergies.php, 4 portal/getamendments.php, 5 portal/getlabresults.php, 6...
9.1CVSS8.2AI score0.25935EPSS
SaveExploits4References2
20