2691 matches found
CVE-2022-25041
OpenEMR v6.0.0 was discovered to contain an incorrect access control issue...
Design/Logic Flaw
OpenEMR v6.0.0 was discovered to contain an incorrect access control issue...
CVE-2022-25041
OpenEMR v6.0.0 was discovered to contain an incorrect access control issue...
CVE-2022-25041
OpenEMR v6.0.0 was discovered to contain an incorrect access control issue...
CVE-2022-25041
OpenEMR v6.0.0 was discovered to contain an incorrect access control issue...
CVE-2022-25041
OpenEMR v6.0.0 contains an incorrect access control vulnerability (CVE-2022-25041). The available documents confirm the affected product/version and the nature of the flaw but do not provide exploit details, affected components, root cause specifics beyond “incorrect access control,” or remediati...
OpenEMR 安全漏洞
OpenEMR is an open source medical management system from the OpenEMR Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in OpenEMR version 6.0.0 that stems from ...
PT-2022-17059
Name of the Vulnerable Software and Affected Versions OpenEMR version 6.0.0 Description The issue is related to incorrect access control. Recommendations For OpenEMR version 6.0.0, at the moment, there is no information about a newer version that contains a fix for this issue...
CVE-2022-25041: Exposure of Resource to Wrong Sphere
OpenEMR v6.0.0 was discovered to contain an incorrect access control issue...
Stored XSS Leads To Session Hijacking
Description Hello everyone, During my testing on openemr at the demo available here https://demo.openemr.io/openemr, I found a Stored XSS on filename at Uploading Documents Templates which is found on Administration tab, what makes this Stored XSS really severe is the ability of stealing session...
Accounting User Can Download Patient Reports in openemr
Vulnerability Type Insecure Direct Object Reference Affected URL https://localhost/openemr/interface/patientfile/report/customreport.php Affected Parameters “Issue7” Authentication Required? Yes Issue Summary Non-privilege users accounting & front-office can download patient reports containing...
OpenEMR <= 6.0.0 IDOR Vulnerability
OpenEMR is prone to an insecure direct object reference IDOR vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2022-25471
An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...
CVE-2022-25471
An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...
Design/Logic Flaw
An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...
CVE-2022-25471
CVE-2022-25471 : OpenEMR 6.0.0 contains an Insecure Direct Object Reference (IDOR). An authenticated attacker can access and modify unauthorized areas by sending a crafted POST to /modules/zend_modules/public/Installer/register. Root cause stated as IDOR; no exploit details or fixes are provided ...
CVE-2022-25471
An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...
CVE-2022-25471
An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...
CVE-2022-25471
An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...
CVE-2022-25471: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...