2160 matches found
CVE-2023-22972
CVE-2023-22972 is a reflected XSS in OpenEMR prior to 7.0.0, located in interface/forms/eye_mag/php/eye_mag_functions.php. The vulnerability allows remote authenticated users to inject arbitrary script/HTML via the REQUEST_URI. Impact is limited to the affected module; exploitation details are no...
CVE-2023-22974
A Path Traversal in setup.php in OpenEMR 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server...
CVE-2023-22972
A Reflected Cross-site scripting XSS vulnerability in interface/forms/eyemag/php/eyemagfunctions.php in OpenEMR 7.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the REQUESTURI...
CVE-2023-22973
A Local File Inclusion LFI vulnerability in interface/forms/LBF/new.php in OpenEMR 7.0.0 allows remote authenticated users to execute code via the formname parameter...
OpenEMR 路径遍历漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A local file inclusion vulnerability exists in versions of OpenEMR prior to 7.0.0,...
CVE-2023-22974
A Path Traversal in setup.php in OpenEMR 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server...
PT-2023-1582 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.0 Description: The issue is related to a Path Traversal vulnerability in the setup.php file of OpenEMR. This vulnerability allows remote unauthenticated users to read arbitrary files by controlling a connection t...
OpenEMR 安全漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in OpenEMR version 7.0.0, which stems from the...
CVE-2023-22972
A Reflected Cross-site scripting XSS vulnerability in interface/forms/eyemag/php/eyemagfunctions.php in OpenEMR 7.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the REQUESTURI...
CVE-2023-22973
CVE-2023-22973 describes a Local File Inclusion (LFI) in OpenEMR’s interface/forms/LBF/new.php. Affected version range is OpenEMR
CVE-2023-22973
A Local File Inclusion LFI vulnerability in interface/forms/LBF/new.php in OpenEMR 7.0.0 allows remote authenticated users to execute code via the formname parameter...
CVE-2022-4733
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in versions prior to OpenEMR 7.0.0.2,...
PT-2022-28047 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.2 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation and then displays it to other users, allowing an attacker t...
CVE-2022-4733 Cross-site Scripting (XSS) - Stored in openemr/openemr
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4733 Cross-site Scripting (XSS) - Stored in openemr/openemr
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4733
OpenEMR OpenEMR prior to 7.0.0.2 is affected by a Stored XSS (CVE-2022-4733) in the OpenEMR repository. The issue stems from the application storing user input without proper sanitization, enabling script injection for other users. Public references confirm the vulnerability and indicate fixed ve...
OpenEMR Access Control Error Vulnerability (CNVD-2023-40915)
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An Access Control Error vulnerability exists in versions of OpenEMR prior to...