EUVD-2018-8330

Malware in sbrugna...

CVE-2018-16521

An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...

CVE-2021-43094

An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition =2.11 and Platform Standalone Edition =2.4.0 via GET requests on arbitrary parameters in patient.page...

PT-2022-11778

Name of the Vulnerable Software and Affected Versions OpenMRS Reference Application Standalone Edition versions 2.11 and earlier OpenMRS Platform Standalone Edition versions 2.4.0 and earlier Description An SQL Injection issue exists via GET requests on arbitrary parameters in the patient.page...

CVE-2021-43094: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition =2.11 and Platform Standalone Edition =2.4.0 via GET requests on arbitrary parameters in patient.page...

CVE-2018-16521

An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...

PT-2018-13609

Name of the Vulnerable Software and Affected Versions OpenMRS Reference Application version 2.8.0 HTML Form Entry version 3.7.0 Description A vulnerability exists due to an XML External Entity XXE issue. This allows for potential exploitation. Recommendations For OpenMRS Reference Application...

CVE-2018-16521: Improper Restriction of XML External Entity Reference

An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...

CVE-2017-12796: Deserialization of Untrusted Data

The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system...

PT-2017-3194

Name of the Vulnerable Software and Affected Versions OpenMRS Reference Application versions prior to 2.6.1 Reporting Compatibility Add On versions prior to 2.0.4 Description The issue is related to the lack of authentication when deserializing XML input into ReportSchema objects. This allows...