2152 matches found
CVE-2021-47817
OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers can chain with a file upload to achieve remote code execution. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enablin...
EUVD-2026-3618
OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript through user profile parameters. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enabling remote command...
CVE-2021-47817
OpenEMR 5.0.2.1 has a cross-site scripting vulnerability that allows authenticated attackers to inject JavaScript via user profile parameters. The underlying issue enables an attacker to craft a payload to download and run a web shell, leading to remote command execution on the vulnerable OpenEMR...
CVE-2021-47817 OpenEMR 5.0.2.1 - Remote Code Execution
OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers can chain with a file upload to achieve remote code execution. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enablin...
OpenEMR cross-site scripting vulnerability
OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Version 5.0.2.1 of OpenEMR contains a cross-site scripting...
PT-2026-3798
Name of the Vulnerable Software and Affected Versions OpenEMR version 5.0.2.1 Description OpenEMR contains a cross-site scripting issue that permits authenticated attackers to inject malicious JavaScript through user profile parameters. Exploitation involves crafting a malicious payload to downlo...
CVE-2021-41843
An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from all tables of the database via the parameter providerid, as demonstrated by the /interface/main/calendar/index.php?module=PostCalendar=search URI...
CVE-2019-16862
Reflected XSS in interface/forms/eyemag/view.php in OpenEMR 5.x before 5.0.2.1 allows a remote attacker to execute arbitrary code in the context of a user's session via the pid parameter...
EUVD-2013-7263
Malware in sbrugna...
EUVD-2021-18962
Malware in sbrugna...
EUVD-2018-7021
Malware in sbrugna...
EUVD-2018-2645
Malware in sbrugna...
EUVD-2020-5816
Malware in sbrugna...
EUVD-2019-17761
Malware in sbrugna...
EUVD-2018-1783
Malware in sbrugna...
EUVD-2018-8954
Malware in sbrugna...
EUVD-2013-4476
Malware in sbrugna...
EUVD-2012-2117
Malware in sbrugna...