OpenEMR 2.8.2 - Login_Frame.php Cross-Site Scripting

OpenEMR 2.8.2 - LoginFrame.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22348/info OpenEMR is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

OpenEMR 2.8.2 - 'Login_Frame.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22348/info OpenEMR is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

OpenEMR 2.8.2 - 'Import_XML.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/22346/info OpenEMR is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

CVE-2006-5811

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSsrcdir parameter...

CVE-2006-5811

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSsrcdir parameter...

CVE-2006-5811

CVE-2006-5811 concerns OpenEMR 2.8.1 where enabling register_globals permits a PHP remote file inclusion via a URL supplied in the GLOBALS[srcdir] parameter in library/translation.inc.php. Exploitation would allow arbitrary PHP code execution on the affected system. The NVD entry lists a CVSS v2 ...

CVE-2006-5795

Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the srcdir parameter to a billingprocess.php, b billingreport.php, c billingreportxml.php, and d printbillingreport.p...

CVE-2006-5795

Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the srcdir parameter to a billingprocess.php, b billingreport.php, c billingreportxml.php, and d printbillingreport.p...

CVE-2006-5795

OpenEMR

CVE-2006-5811: Undefined Security Weakness

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSsrcdir parameter...

CVE-2006-5795: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the srcdir parameter to a billingprocess.php, b billingreport.php, c billingreportxml.php, and d printbillingreport.p...

Echo Security Advisory 2006.60

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV60$2006 ----------------------------------------------------------------------------------------------- ECHOADV60$2006 OpenEMR =2.8.1 Multiple Remote File Inclusion Vulnerability...

OpenEMR <= 2.8.1 (srcdir) Multiple Remote File Inclusion Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV60$2006 ----------------------------------------------------------------------------------------------- ECHOADV60$2006 OpenEMR =2.8.1 Multiple Remote File Inclusion...

OpenEMR <= 2.8.1 (srcdir) Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== OpenEMR = 2.8.1 srcdir Multiple Remote File Inclusion Vulnerabilities ======================================================================== \ /\ \ / | \ \ | / \ //...

OpenEMR 2.8.1 - srcdir Multiple Remote File Inclusions

OpenEMR 2.8.1 - srcdir Multiple Remote File Inclusions \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV60$2006 ----------------------------------------------------------------------------------------------- ECHOADV60$2006 OpenEMR =2.8.1 Multiple Remote File...

[ECHO_ADV_60_2006] OpenEMR &lt;=2.8.1 Multiple Remote File Inclusion Vulnerability

----------------------------------------------------------------------------------------------- ECHOADV60$2006 OpenEMR =2.8.1 Multiple Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------------- Author : Dedi Dwianto a.k.a...

OpenEMR 2.8.1 - 'srcdir' Multiple Remote File Inclusions

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV60$2006 ----------------------------------------------------------------------------------------------- ECHOADV60$2006 OpenEMR =2.8.1 Multiple Remote File Inclusion Vulnerability...

Remote file inclusion

PHP remote file inclusion vulnerability in contrib/forms/evaluation/CFormEvaluation.class.php in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSfileroot parameter...

CVE-2006-2929

PHP remote file inclusion vulnerability in contrib/forms/evaluation/CFormEvaluation.class.php in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSfileroot parameter...

CVE-2006-2929

PHP remote file inclusion vulnerability in contrib/forms/evaluation/CFormEvaluation.class.php in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSfileroot parameter...