OpenEMR Cross-Site Scripting Vulnerability (CNVD-2022-61334)

OpenEMR is an open source medical management system from the OpenEMR community. A cross-site scripting vulnerability exists in versions of OpenEMR prior to 6.1.0.1, which stems from a lack of data validation filters for user-supplied data and output data in the file name on the "Upload Document...

CVE-2022-1461

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...

Design/Logic Flaw

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1461 Non Privilege User can Enable or Disable Registered in openemr/openemr

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1461 Non Privilege User can Enable or Disable Registered in openemr/openemr

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1461

CVE-2022-1461 affects OpenEMR prior to 6.1.0.1. A non-privileged user can enable or disable registration for OpenEMR modules via the vulnerable endpoint in the Installer module (openemr/interface/modules/zend_modules/public/Installer/manage), indicating an improper authorization/control flow vuln...

CVE-2022-1458

Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1459

Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1459

Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1458

Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1...

Cross site scripting

Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1...

Design/Logic Flaw

Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1459 Non-Privilege User Can View Patient’s Disclosures in openemr/openemr

Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1459 Non-Privilege User Can View Patient’s Disclosures in openemr/openemr

Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1459

CVE-2022-1459 affects OpenEMR prior to 6.1.0.1. The issue is an Insecure Direct Object Reference that allows a non-privilege user to view patient disclosures via the OpenEMR web interface (example endpoint: interface/patient_file/summary/record_disclosure.php?editlid=…). This exposes confidential...

CVE-2022-1458

CVE-2022-1458 corresponds to a Stored XSS in OpenEMR (openemr/openemr) prior to 6.1.0.1, specifically in the Upload Document Template filename handling. The vulnerability can lead to session hijacking, potentially enabling account takeover. A fix is available in OpenEMR 6.1.0.1 or later; multiple...

CVE-2022-1458 Stored XSS Leads To Session Hijacking in openemr/openemr

Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1458 Stored XSS Leads To Session Hijacking in openemr/openemr

Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1...

OpenEMR安全漏洞

OpenEMR is an open source medical management system from the Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in versions of OpenEMR prior to 6.1.0.1 that stem...

OpenEMR 跨站脚本漏洞

OpenEMR is an open source medical management system from the OpenEMR community. A cross-site scripting vulnerability exists in versions of OpenEMR prior to 6.1.0.1, which stems from a lack of data validation filters for user-supplied data and output data in the file name on the "Upload Document...