2690 matches found
CVE-2023-2943 Code Injection in openemr/openemr
Code Injection in GitHub repository openemr/openemr prior to 7.0.1...
PT-2023-5360 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to improper access control in the OpenEMR software, which can be exploited by a remote attacker to view, create, and edit protected information. Recommendations: For OpenEMR...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in OpenEMR prior to version 7.0.1. The...
CVE-2023-2946
OpenEMR (openemr/openemr) prior to version 7.0.1 is affected by an improper access control vulnerability. The issue originates from insufficient access restrictions, enabling unauthorized users to view/edit protected information. Reported impact includes exposure of user data and modification cap...
CVE-2023-2942 Improper Input Validation in openemr/openemr
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2946 Improper Access Control in openemr/openemr
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2947
CVE-2023-2947 is a stored XSS vulnerability in OpenEMR prior to 7.0.1, triggered via the admin panel’s Site Name/Branding field (admin.php). The root cause is inadequate sanitization of the text, enabling an attacker with admin access to inject HTML. Public sources corroborate OpenEMR
CVE-2023-2947: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...
PT-2023-5355 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to a lack of protection for the web page structure in OpenEMR, allowing for Cross-site Scripting XSS - Stored attacks. This could enable a remote attacker to perform inter-site...
CVE-2023-2945
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2947
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2944
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
OpenEMR 输入验证错误漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An input validation error vulnerability previously existed in OpenEMR version 7.0....
CVE-2023-2943: Improper Control of Generation of Code
Code Injection in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2944: Improper Access Control
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2944
CVE-2023-2944 affects OpenEMR prior to 7.0.1 and is an Improper Access Control vulnerability. All documented sources describe that a low-privilege user could access or modify another user’s protected data in the address book, enabling viewing/editing of other users’ information. The issue is root...
PT-2023-5356 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is due to improper input validation in the OpenEMR software, which can be exploited by a remote attacker to impact the confidentiality and integrity of data. Recommendations: For versions...
PT-2023-5358 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to missing authorization in the OpenEMR software, which can be exploited by a remote attacker to elevate their privileges. Recommendations: For versions prior to 7.0.1, update ...