2690 matches found
CVE-2022-1181 Stored Cross Site Scripting in openemr/openemr
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2...
CVE-2022-1181 Stored Cross Site Scripting in openemr/openemr
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2...
CVE-2022-1181
CVE-2022-1181 – Stored Cross Site Scripting in OpenEMR (
CVE-2022-1181
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2...
CVE-2022-1177
OpenEMR contains an insecure direct object reference in interface/patient_file/report/custom_report.php (pre-6.1.0). An authenticated user can manipulate the Issue_7 parameter to download arbitrary patient reports, exposing sensitive data. The issue is tracked as CVE-2022-1177 and is documented a...
CVE-2022-1177 Accounting User Can Download Patient Reports in openemr in openemr/openemr
Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0...
CVE-2022-1177
Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0...
CVE-2022-1177 Accounting User Can Download Patient Reports in openemr in openemr/openemr
Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0...
CVE-2022-1178
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
CVE-2022-1178
CVE-2022-1178 is a Stored Cross-Site Scripting vulnerability affecting OpenEMR up to 6.0.0.4. The issue arises from insufficient sanitization of user input, enabling an authenticated user to inject scripts via controller.php?practice_settings&document_category&action=add_node&parent_id=… with the...
CVE-2022-1178 Stored Cross Site Scripting in openemr/openemr
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
CVE-2022-1179: Improper Neutralization of Input During Web Page Generation
Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
PT-2022-13695
Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.0.0.4 Description The issue allows a non-privileged user to create new rules, leading to stored cross-site scripting in the GitHub repository openemr/openemr. Recommendations For versions prior to 6.0.0.4, update to...
CVE-2022-1181: Improper Neutralization of Input During Web Page Generation
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2...
PT-2022-13697
Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.0.0.2 Description The issue is related to Stored Cross Site Scripting in the GitHub repository openemr/openemr. Recommendations For versions prior to 6.0.0.2, update to version 6.0.0.2 or later to resolve the issue...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. openEMR has a cross-site scripting vulnerability that stems from the lack ...
PT-2022-13693
Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.1.0 Description The issue allows an accounting user to download patient reports in openemr. This is a problem because accounting users should not have access to patient reports. Recommendations For versions prior to...