CVE-2018-10572

interface/patientfile/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the newtemplatename and formbody parameters...

CVE-2018-10573

interface/fax/faxdispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan parameter...

OpenEMR <= 5.0.0 Multiple Vulnerabilities - Active Check

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

OpenEMR open-flash-chart.swf and _posteddata.php files cross-site scripting vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in the open-flash-chart.swf a...

OpenEMR fax_dispatch.php file OS command injection vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An operating system command injection vulnerability exists in the...

CVE-2018-1000020

OpenEMR version 5.0.0 contains a Cross Site Scripting XSS vulnerability in open-flash-chart.swf and posteddata.php that can result in . This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher...

CVE-2018-1000020

OpenEMR version 5.0.0 contains a Cross Site Scripting XSS vulnerability in open-flash-chart.swf and posteddata.php that can result in . This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher...

CVE-2018-1000019

OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in faxdispatch.php that can result in OS command injection by an authenticated attacker with any role. This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher...

Cross site scripting

OpenEMR version 5.0.0 contains a Cross Site Scripting XSS vulnerability in open-flash-chart.swf and posteddata.php that can result in . This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher...

Command injection

OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in faxdispatch.php that can result in OS command injection by an authenticated attacker with any role. This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher...

CVE-2018-1000019

OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in faxdispatch.php that can result in OS command injection by an authenticated attacker with any role. This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher...

CVE-2018-1000020

OpenEMR version 5.0.0 contains a Cross Site Scripting XSS vulnerability in open-flash-chart.swf and posteddata.php that can result in . This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher...

CVE-2018-1000019

CVE-2018-1000019 affects OpenEMR 5.0.0 via OS command injection in fax_dispatch.php. The authenticated attacker with any role could exploit this vulnerability. The issue has been fixed in OpenEMR 5.0.0 Patch 2 or higher (per connected advisories and the CVE description). Remediation is to upgrade...

CVE-2018-1000020

OpenEMR 5.0.0 contains a Cross-Site Scripting (XSS) vulnerability in open-flash-chart.swf and _posteddata.php. The issue is addressed in OpenEMR 5.0.0 Patch 2 or higher. No exploitation details are provided beyond the fixed version information; confirm patched builds for production deployments an...

CVE-2018-1000019

OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in faxdispatch.php that can result in OS command injection by an authenticated attacker with any role. This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher...

OpenEMR 5.0.0 - OS Command Injection Cross-Site Scripting

OpenEMR 5.0.0 - OS Command Injection Cross-Site Scripting SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: OS Command Injection & Reflected Cross Site Scripting product: OpenEMR vulnerable version: 5.0.0 fixed version:...

OpenEMR 5.0.0 - OS Command Injection / Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: OS Command Injection & Reflected Cross Site Scripting product: OpenEMR vulnerable version: 5.0.0 fixed version: 5.0.0 Patch 2 or higher CVE number: - impact: Critical...

OpenEMR < 5.0.0 Patch 2 Multiple Vulnerabilities

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

OS Command Injection & Reflected Cross Site Scripting in OpenEMR

Vendor description: ------------------- "OpenEMR is the most popular open source electronic health records and medical practice management solution. ONC certified with international usage, OpenEMR's goal is a superior alternative to its proprietary counterparts." Source: http://www.open-emr.org/...

OpenEMR 5.0.0 Command Injection / Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: OS Command Injection & Reflected Cross Site Scripting product: OpenEMR vulnerable version: 5.0.0 fixed version: 5.0.0 Patch 2 or higher CVE number: - impact: Critical...