2689 matches found
PT-2025-13810 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3.1 Description: An Out-of-Band Server-Side Request Forgery OOB SSRF issue was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal resources. This...
PT-2025-13796 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3 Description: The issue concerns reflected cross-site scripting XSS in the AJAX Script interface, specifically in the layout listitems ajax.php file via the target parameter. This allows for potential XSS attack...
CVE-2025-30161: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
OpenEMR is a free and open source electronic health records and medical practice management application. A stored XSS vulnerability in the Bronchitis form component of OpenEMR allows anyone who is able to edit a bronchitis form to steal credentials from administrators. This vulnerability is fixed...
CVE-2025-30149: Improper Neutralization of Input During Web Page Generation
OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting XSS in the AJAX Script interface\super\layoutlistitemsajax.php via the target parameter. This vulnerability is fixed in 7.0.3...
CVE-2025-31117: Server-Side Request Forgery (SSRF)
OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery OOB SSRF vulnerability was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal...
OpenEMR 安全漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in OpenEMR versions prior to 7.0.3, which stems...
PT-2025-13798 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3 Description: A stored XSS vulnerability in the Bronchitis form component of OpenEMR allows attackers to steal credentials from administrators. This issue can be exploited by anyone who can edit a bronchitis for...
CVE-2025-29789
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue...
CVE-2025-29789
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue...
CVE-2025-29789 OpenEMR Has Directory Traversal in Load Code feature
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue...
CVE-2025-29789 OpenEMR Has Directory Traversal in Load Code feature
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue...
CVE-2025-29789
CVE-2025-29789 – OpenEMR is affected by a Directory Traversal in the Load Code feature prior to version 7.3.0. The issue enables traversal of directories and is mitigated by the 7.3.0 patch referenced in multiple sources. The vulnerability affects OpenEMR’s load code functionality and has been ad...
CVE-2025-29789
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue...
CVE-2025-29789 OpenEMR Has Directory Traversal in Load Code feature
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue...
PT-2025-12831
Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 7.3.0 Description The issue concerns a Directory Traversal vulnerability in the Load Code feature of OpenEMR, a free and open source electronic health records and medical practice management application. Recommendatio...
CVE-2025-29789: Relative Path Traversal
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue...
The vulnerability of the phpgacl/acl_admin.tpl template in the PHP library for managing access in web applications. This is part of the phpGACL system used for managing medical documentation in OpenEMR. It allows attackers to perform cross-site scripting attacks.
The vulnerability of the phpgacl/acladmin.tpl PHP template used in the phpGACL access control library for web applications in the OpenEMR medical documentation system is related to the lack of protection for the website structure when processing the aclid template parameter. Exploiting this...
The vulnerability of the phpgacl/assign_group.tpl template in the PHP library for managing access in web applications of the phpGACL system for managing medical documentation in OpenEMR, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the phpgacl/assigngroup.tpl template in the PHP library for managing access in web applications is related to the lack of protective measures taken when processing the groupid template parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site...
The vulnerability of the phpgacl/acl_admin.tpl template in the PHP library for managing access in web applications. This is part of the phpGACL system used for managing medical documentation in OpenEMR. It allows attackers to perform cross-site scripting attacks.
The vulnerability of the phpgacl/acladmin.tpl template in the PHP library for managing access in web applications is related to the lack of protective measures taken when processing the action template parameters. Exploiting this vulnerability allows a remote attacker to perform cross-site...