CVE-2018-15145

OpenEMR before 5.0.1.4 contains multiple SQL injection vulnerabilities in portal/add_edit_event_user.php that allow a remote attacker to execute arbitrary SQL commands via the (1) eid, (2) userid, or (3) pid parameters. This affects OpenEMR versions prior to 5.0.1.4. Impact is the ability to mani...