2690 matches found
CVE-2022-2494
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
EUVD-2022-34753
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-2493
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-2493 Data Access from Outside Expected Data Manager Component in openemr/openemr
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-2493
CVE-2022-2493 affects OpenEMR prior to 7.0.0, where a missing functional-level access control allows non-privileged users to access administrator modules, enabling data access outside the expected Data Manager boundary. Reports and CVSS data confirm a HIGH-severity impact with confidentiality and...
DOM-based Cross-Site Scripting (XSS) in OpenEMR 7.0.0 and below at White list files
Description We would like to report the vulnerability we found during software testing. The OpenEMR 7.0.0 latest version and below version; Open Source electronic health records and medical practice management application; has DOM-based Cross-Site Scripting XSS vulnerability in the...
OpenEMR 安全漏洞
OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. versions of OpenEMR prior to 7.0.0 have an access control error...
CVE-2022-2494: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
PT-2022-17000
Name of the Vulnerable Software and Affected Versions openemr versions prior to 7.0.0 Description The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject malicious...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source healthcare management system from the Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. openemr versions prior to 7.0.0 have a cross-site scripting vulnerability...
CVE-2022-2493: Data Access from Outside Expected Data Manager Component
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...
PT-2022-16991
Name of the Vulnerable Software and Affected Versions openemr/openemr versions prior to 7.0.0 Description The issue concerns data access from outside the expected Data Manager Component in the GitHub repository openemr/openemr. Recommendations For versions prior to 7.0.0, update to version 7.0.0 ...
Non-Privilege user can view Patient's Amendments
Description We would like to report the vulnerability we found during software testing. The OpenEMR 7.0.0 latest version Open-Source electronic health records and medical practice management application has Insecure direct object reference IDOR to function “Patient’s Amendments”, and it never bee...
Unauthorized to create and edit Amendments function
Description We would like to report the vulnerability we found during software testing. The OpenEMR 7.0.0 latest version Open Source electronic health records and medical practice management application has unauthorized create and edit on “Patient/dashboard/Amendments” with function...
WS-2022-0247
An incorrect synchronization issue was discovered in the chat function in openemr/openemr up to 7.0.0. While the username is not validated, an attacker can impersonate by sending messages with any name even though it does not match the name of the logged-in user. Version 7.0.0.1 contains a patch...
Reflected Cross Site Scripting in OpenEMR 7.0.0 and below at backup
Description We would like to report the vulnerability we found during software testing. The OpenEMR 7.0.0 latest version and below version Open Source electronic health records and medical practice management application has Reflected Cross Site Scripting vulnerability in the formstatus parameter...
WS-2022-0232
Improper authorization in openemr/openemr before 7.0.0 - receptionist can read all Clinic reports...
Cross-site Scripting (XSS) - Stored
Description openemr / openemr is vulnerable to Cross-site Scripting XSS - Stored Proof of Concept // Poc alertdocument.cookie steps to reproduce: 1 login open emr patient portal https://demo.openemr.io/openemr/portal/index.php 2 goto my profile in https://demo.openemr.io/openemr/portal/home.php...
OpenEMR Cross-Site Scripting Vulnerability (CNVD-2022-61334)
OpenEMR is an open source medical management system from the OpenEMR community. A cross-site scripting vulnerability exists in versions of OpenEMR prior to 6.1.0.1, which stems from a lack of data validation filters for user-supplied data and output data in the file name on the "Upload Document...
