2690 matches found
CVE-2022-1178: Improper Neutralization of Input During Web Page Generation
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
PT-2022-13694
Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.0.0.4 Description The issue is related to Stored Cross Site Scripting in the GitHub repository openemr/openemr. Recommendations For versions prior to 6.0.0.4, update to version 6.0.0.4 or later to resolve the issue...
CVE-2022-1180: Improper Neutralization of Input During Web Page Generation
Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...
PT-2022-13696
Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.0.0.4 Description The issue is related to Reflected Cross Site Scripting in the GitHub repository openemr/openemr. Recommendations For versions prior to 6.0.0.4, update to version 6.0.0.4 or later to resolve the iss...
Non-Privilege User Can View Patient’s Disclosures
Vulnerability Type Insecure Direct Object Reference Affected URL https://localhost/openemr-6.0.0/ /interface/patientfile/summary/recorddisclosure.php?editlid=X Method GET Parameter editlid Authentication Required? Yes Issue Summary Non-privilege users accounting, front office can view patient’s...
Missing Function Level Access Control
Vulnerability Type Missing Function Level Access Control Affected URL 62 vulnerable instances as listed in Table 1 Authentication Required? Yes Issue Summary Web applications usually only show functionality that a user has the need for and right to use in the UI. However, this is not the case for...
Non Privilege User can Enable or Disable Registered
Vulnerability Type Insecure Direct Object Reference Affected URL https://localhost/openemr-6.0.0/interface/modules/zendmodules/public/Installer/manage Affected Parameters “modAction=enabled” Authentication Required? Yes Issue Summary Non-privilege users accounting & front-office can disable and...
CVE-2022-24643
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
CVE-2022-24643
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
Cross site scripting
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
CVE-2022-24643
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
CVE-2022-24643
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
CVE-2022-24643
CVE-2022-24643 is a stored cross-site scripting (XSS) vulnerability in OpenEMR Hospital Information Management System v6.0.0. The NVD description states a stored XSS flaw, with CVSSv3.1 base score 5.4 (Network, Low user interaction, Privileges Required: Low, Scope: Changed; Confidentiality/Integr...
CVE-2022-24643
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
PT-2022-16770
Name of the Vulnerable Software and Affected Versions OpenEMR Hospital Information Management System version 6.0.0 Description A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System. This issue allows for the storage of malicious scripts that...
CVE-2022-24643: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source medical management system from the OpenEMR Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in the OpenEMR Hospital Information...