CVE-2020-36243

creationtimestamp| type| source ---|---|--- 2021-02-07 22:38:36+00:00| seen| https://t.me/cibsecurity/23199...

CVE-2020-36243

CVE-2020-36243 affects OpenEMR 5.0.2.1 (Patient Portal). The vulnerability is a Command Injection in /interface/main/backup.php where an authenticated user can craft a POST request containing shell metacharacters to execute arbitrary OS commands. Documents corroborate an authenticated exploit pat...