OpenEMR 'interface/globals.php' Authentication Bypass Vulnerability - Active Check

OpenEMR is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; if...

OpenEMR 'interface/globals.php' Security Bypass Vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in the Web interface of OpenEMR. A remote...

CVE-2015-4453

interface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers to bypass authentication and obtain sensitive information via an ignoreAuth=1 value to certain scripts, as demonstrated by 1 interface/fax/faxdispatchnewpid.php and 2 interface/billing/sleobsearch.php...

Authentication flaw

interface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers to bypass authentication and obtain sensitive information via an ignoreAuth=1 value to certain scripts, as demonstrated by 1 interface/fax/faxdispatchnewpid.php and 2 interface/billing/sleobsearch.php...

CVE-2015-4453

interface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers to bypass authentication and obtain sensitive information via an ignoreAuth=1 value to certain scripts, as demonstrated by 1 interface/fax/faxdispatchnewpid.php and 2 interface/billing/sleobsearch.php...

CVE-2015-4453

OpenEMR vulnerable component: interface/globals.php. Root cause: a bug in the implementation of the legacy (fake) register_globals handling allows an ignoreAuth=1 parameter to bypass authentication. Affected versions: OpenEMR 2.x, 3.x, and 4.x up to 4.2.0 patch 2. Impact: remote attackers can acc...

OpenEMR vulnerable to authentication bypass

Overview OpenEMR is an electronic health records and medical practice management application. OpenEMR contains an authentication bypass vulnerability CWE-302. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#22677713: OpenEMR vulnerable to authentication bypass

OpenEMR is an electronic health records and medical practice management application. OpenEMR contains an authentication bypass vulnerability CWE-302. Impact Sensitive information may be obtained by a remote attacker who can access the web interface of the product. Solution Update the software and...

OpenEMR 4.2.0 Authentication Bypass Vulnerability

OpenEMR versions 4.2.0 and 4.2.0 patch 1 suffer from an authentication bypass vulnerability. Title: Authentication bypass in OpenEMR CVE Reference: CVE-2015-4453 Product: OpenEMR Vendor: http://www.open-emr.org/ Tested versions: 4.2.0 and 4.2.0 patch 1 Affected versions: 2.8.3 to 4.2.0 patch 1...

OpenEMR 'validateUser.php' SQLi Vulnerability - Active Check

OpenEMR is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr";...

OpenEMR 4.1.2 forms_admin.php SQL Injection

SQL Injection vulnerability in OpenEMR formsadmin.php id parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

OpenEMR 4.1.1 new_comprehensive_save.php SQL Injection

SQL Injection vulnerability in OpenEMR newcomprehensivesave.php formpubpid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

OpenEMR 4.1.1 logview.php SQL Injection

SQL Injection vulnerability in OpenEMR logview sortby parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

OpenEMR 4.1.2(7) - Multiple SQL Injections

Vulnerability title: Multiple Authenticated SQL Injections In OpenEMR CVE: CVE-2014-5462 Vendor: OpenEMR Product: OpenEMR Affected version: 4.1.27 and earlier Fixed version: N/A Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated...

OpenEMR 4.1.2(7) - Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Vulnerability title: Multiple Authenticated SQL Injections In OpenEMR CVE: CVE-2014-5462 Vendor: OpenEMR Product: OpenEMR Affected version: 4.1.27 and earlier Fixed version: N/A Reported by: Jerzy Kramarz Details: SQL injection has been found...

OpenEMR 4.1.2(7) - Multiple SQL Injections

OpenEMR 4.1.27 - Multiple SQL Injections Vulnerability title: Multiple Authenticated SQL Injections In OpenEMR CVE: CVE-2014-5462 Vendor: OpenEMR Product: OpenEMR Affected version: 4.1.27 and earlier Fixed version: N/A Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed...

Sql injection

Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 Patch 7 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 layoutid parameter to interface/super/editlayout.php; 2 formpatientid, 3 formdrugname, or 4 formlotnumber parameter to...

CVE-2014-5462

Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 Patch 7 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 layoutid parameter to interface/super/editlayout.php; 2 formpatientid, 3 formdrugname, or 4 formlotnumber parameter to...

CVE-2014-5462

Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 Patch 7 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 layoutid parameter to interface/super/editlayout.php; 2 formpatientid, 3 formdrugname, or 4 formlotnumber parameter to...

CVE-2014-5462

OpenEMR 4.1.2 (Patch 7) and earlier contain multiple SQL injection vulnerabilities exploitable by remote authenticated users. Affected components include interface/super/edit_layout.php (layout_id), interface/reports/prescriptions_report.php (several), interface/billing/edit_payment.php, interfac...