2167 matches found
CVE-2022-1177 Accounting User Can Download Patient Reports in openemr in openemr/openemr
Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0...
CVE-2022-1178 Stored Cross Site Scripting in openemr/openemr
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
CVE-2022-1178
CVE-2022-1178 is a Stored Cross-Site Scripting vulnerability affecting OpenEMR up to 6.0.0.4. The issue arises from insufficient sanitization of user input, enabling an authenticated user to inject scripts via controller.php?practice_settings&document_category&action=add_node&parent_id=… with the...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. openEMR has a cross-site scripting vulnerability that stems from the lack ...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...
Non-Privilege User Can View Patient’s Disclosures
Vulnerability Type Insecure Direct Object Reference Affected URL https://localhost/openemr-6.0.0/ /interface/patientfile/summary/recorddisclosure.php?editlid=X Method GET Parameter editlid Authentication Required? Yes Issue Summary Non-privilege users accounting, front office can view patient’s...
Missing Function Level Access Control
Vulnerability Type Missing Function Level Access Control Affected URL 62 vulnerable instances as listed in Table 1 Authentication Required? Yes Issue Summary Web applications usually only show functionality that a user has the need for and right to use in the UI. However, this is not the case for...
Non Privilege User can Enable or Disable Registered
Vulnerability Type Insecure Direct Object Reference Affected URL https://localhost/openemr-6.0.0/interface/modules/zendmodules/public/Installer/manage Affected Parameters “modAction=enabled” Authentication Required? Yes Issue Summary Non-privilege users accounting & front-office can disable and...
CVE-2022-24643
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
CVE-2022-24643
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
Cross site scripting
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
CVE-2022-24643
CVE-2022-24643 is a stored cross-site scripting (XSS) vulnerability in OpenEMR Hospital Information Management System v6.0.0. The NVD description states a stored XSS flaw, with CVSSv3.1 base score 5.4 (Network, Low user interaction, Privileges Required: Low, Scope: Changed; Confidentiality/Integr...
CVE-2022-24643
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
CVE-2022-24643
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source medical management system from the OpenEMR Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in the OpenEMR Hospital Information...
CVE-2022-25041
OpenEMR v6.0.0 was discovered to contain an incorrect access control issue...