OpenEMR 访问控制错误漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. An Access Control Error vulnerability exists in versions of OpenEMR prior to 7.0....

PT-2023-5360 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to improper access control in the OpenEMR software, which can be exploited by a remote attacker to view, create, and edit protected information. Recommendations: For OpenEMR...

CVE-2023-2946 Improper Access Control in openemr/openemr

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

OpenEMR 代码注入漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A code injection vulnerability previously existed in OpenEMR version 7.0.1. No...

PT-2023-5358 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to missing authorization in the OpenEMR software, which can be exploited by a remote attacker to elevate their privileges. Recommendations: For versions prior to 7.0.1, update ...

CVE-2023-2945 Missing Authorization in openemr/openemr

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2942 Improper Input Validation in openemr/openemr

Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2947 Cross-site Scripting (XSS) - Stored in openemr/openemr

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2946

OpenEMR (openemr/openemr) prior to version 7.0.1 is affected by an improper access control vulnerability. The issue originates from insufficient access restrictions, enabling unauthorized users to view/edit protected information. Reported impact includes exposure of user data and modification cap...

PT-2023-5355 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to a lack of protection for the web page structure in OpenEMR, allowing for Cross-site Scripting XSS - Stored attacks. This could enable a remote attacker to perform inter-site...

CVE-2023-2946 Improper Access Control in openemr/openemr

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2945 Missing Authorization in openemr/openemr

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2944 Improper Access Control in openemr/openemr

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

PT-2023-5359 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to improper access control in the OpenEMR software, which can be exploited by a remote attacker to view, modify, and delete protected information. Recommendations: For versions...

OpenEMR 输入验证错误漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An input validation error vulnerability previously existed in OpenEMR version 7.0....

OpenEMR 访问控制错误漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. An Access Control Error vulnerability previously existed in OpenEMR version 7.0.1...

PT-2023-5356 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is due to improper input validation in the OpenEMR software, which can be exploited by a remote attacker to impact the confidentiality and integrity of data. Recommendations: For versions...

CVE-2023-2947 Cross-site Scripting (XSS) - Stored in openemr/openemr

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2943

CVE-2023-2943 affects OpenEMR (openemr/openemr) prior to 7.0.1. The initial description indicates a code injection vulnerability in the repository, with the OpenEMR project noting the issue for versions before 7.0.1. Connected details corroborate this as a code injection flaw in OpenEMR, and one ...

CVE-2023-2947

CVE-2023-2947 is a stored XSS vulnerability in OpenEMR prior to 7.0.1, triggered via the admin panel’s Site Name/Branding field (admin.php). The root cause is inadequate sanitization of the text, enabling an attacker with admin access to inject HTML. Public sources corroborate OpenEMR