OpenEMR Electronic Medical Record Software v3.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================================================== OpenEMR Electronic Medical Record Software v3.2 Multiple Vulnerabilities ======================================================================== Redspin Security Notice ...

OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities

OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities Redspin Security Notice -- RSN-2010-01 Multiple vulnerabilities in OpenEMR Electronic Medical Record Software Overview ---------------- Quote from http://www.oemr.org/ OpenEMR is a free medical practice management, electron...

Cross site scripting

Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as conduct a remote file inclusion attacks via the srcdir parameter in custom/importxml.php or b...

CVE-2007-0649

Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as conduct a remote file inclusion attacks via the srcdir parameter in custom/importxml.php or b...

CVE-2007-0649

CVE-2007-0649 affects OpenEMR 2.8.2 and earlier. A variable overwrite vulnerability in interface/globals.php allows remote attackers to overwrite arbitrary program variables and perform other actions. Related vectors include (a) remote file inclusion via the srcdir parameter in custom/import_xml....

CVE-2007-0649

Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as conduct a remote file inclusion attacks via the srcdir parameter in custom/importxml.php or b...

CVE-2007-0649: Improper Control of Generation of Code

Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as conduct a remote file inclusion attacks via the srcdir parameter in custom/importxml.php or b...

OpenEMR 2.8.2 - Import_XML.php Remote File Inclusion

OpenEMR 2.8.2 - ImportXML.php Remote File Inclusion source: https://www.securityfocus.com/bid/22346/info OpenEMR is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application...

OpenEMR 2.8.2 - 'Login_Frame.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22348/info OpenEMR is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

OpenEMR 2.8.2 - Login_Frame.php Cross-Site Scripting

OpenEMR 2.8.2 - LoginFrame.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22348/info OpenEMR is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

OpenEMR 2.8.2 - 'Import_XML.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/22346/info OpenEMR is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

CVE-2006-5811

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSsrcdir parameter...

CVE-2006-5811

CVE-2006-5811 concerns OpenEMR 2.8.1 where enabling register_globals permits a PHP remote file inclusion via a URL supplied in the GLOBALS[srcdir] parameter in library/translation.inc.php. Exploitation would allow arbitrary PHP code execution on the affected system. The NVD entry lists a CVSS v2 ...

CVE-2006-5811

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSsrcdir parameter...

CVE-2006-5795

Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the srcdir parameter to a billingprocess.php, b billingreport.php, c billingreportxml.php, and d printbillingreport.p...

CVE-2006-5795

Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the srcdir parameter to a billingprocess.php, b billingreport.php, c billingreportxml.php, and d printbillingreport.p...

CVE-2006-5795

OpenEMR

CVE-2006-5811: Undefined Security Weakness

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSsrcdir parameter...

CVE-2006-5795: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the srcdir parameter to a billingprocess.php, b billingreport.php, c billingreportxml.php, and d printbillingreport.p...

Echo Security Advisory 2006.60

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV60$2006 ----------------------------------------------------------------------------------------------- ECHOADV60$2006 OpenEMR =2.8.1 Multiple Remote File Inclusion Vulnerability...