Sql injection

Multiple SQL injection vulnerabilities in portal/findapptpopupuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 catid or 2 providerid parameter...

CVE-2018-15143

Multiple SQL injection vulnerabilities in portal/findapptpopupuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 catid or 2 providerid parameter...

CVE-2018-15142

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute arbitrary PHP code by writing a file with a PHP extension via the "docid" and "content" parameters and accessing it in the traversed...

CVE-2018-15144

SQL injection vulnerability in interface/deidentificationforms/finddrugpopup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the searchterm parameter...

CVE-2018-15141

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete...

CVE-2018-15140

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get...

CVE-2018-15139

Unrestricted file upload in interface/super/managesitefiles.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory...

CVE-2018-15142

OpenEMR prior to 5.0.1.4 has a directory-traversal vulnerability in portal/import_template.php that allows an authenticated patient-portal user to write a PHP file via docid/content and access it in the traversed directory, resulting in arbitrary PHP code execution. Affected versions are older th...

CVE-2018-15140

CVE-2018-15140 : OpenEMR before 5.0.1.4 is vulnerable to a directory traversal in portal/import_template.php. An attacker authenticated in the patient portal can read arbitrary files by supplying a crafted docid when mode is set to get. The issue is a file disclosure in the portal workflow, not a...

CVE-2018-15139

OpenEMR prior to 5.0.1.4 is affected by Unrestricted file upload in interface/super/manage_site_files.php. An authenticated remote attacker can upload a PHP file via the images upload form and access it in the images directory to execute arbitrary PHP code. Impact is high (C/H I/H A/H as per CVSS...

CVE-2018-15145

Multiple SQL injection vulnerabilities in portal/addediteventuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 eid, 2 userid, or 3 pid parameter...

CVE-2018-15140

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get...

CVE-2018-15143

Multiple SQL injection vulnerabilities in portal/findapptpopupuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 catid or 2 providerid parameter...

CVE-2018-15145

OpenEMR before 5.0.1.4 contains multiple SQL injection vulnerabilities in portal/add_edit_event_user.php that allow a remote attacker to execute arbitrary SQL commands via the (1) eid, (2) userid, or (3) pid parameters. This affects OpenEMR versions prior to 5.0.1.4. Impact is the ability to mani...

CVE-2018-15141

OpenEMR is affected by a directory traversal vulnerability in portal/import_template.php prior to version 5.0.1.4. A remote attacker authenticated in the patient portal can delete arbitrary files by supplying a crafted docid while mode=delete. Exploitation evidence exists (e.g., PoC in exploit-db...

CVE-2018-15144

SQL injection vulnerability in interface/deidentificationforms/finddrugpopup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the searchterm parameter...

CVE-2018-15142

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute arbitrary PHP code by writing a file with a PHP extension via the "docid" and "content" parameters and accessing it in the traversed...

CVE-2018-15141

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete...

CVE-2018-15143

OpenEMR is affected by SQL injection in portal/find_appt_popup_user.php. Versions prior to 5.0.1.4 allow a remote attacker to inject SQL via the catid or providerid parameters, enabling arbitrary SQL commands. This is documented across multiple sources (NVD entry CVE-2018-15143 and related record...

CVE-2018-15144

CVE-2018-15144 describes an SQL injection in OpenEMR’s interface/de_identification_forms/find_drug_popup.php for versions before 5.0.1.4. A remote authenticated attacker can execute arbitrary SQL via the search_term parameter. Affected: OpenEMR 5.0.1.3 and earlier. Root cause: unsafely constructe...