CVE-2018-15145

Multiple SQL injection vulnerabilities in portal/addediteventuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 eid, 2 userid, or 3 pid parameter...

CVE-2018-15145

OpenEMR before 5.0.1.4 contains multiple SQL injection vulnerabilities in portal/add_edit_event_user.php that allow a remote attacker to execute arbitrary SQL commands via the (1) eid, (2) userid, or (3) pid parameters. This affects OpenEMR versions prior to 5.0.1.4. Impact is the ability to mani...

CVE-2018-15145: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in portal/addediteventuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 eid, 2 userid, or 3 pid parameter...