OpenEMR Security Bypass Vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security bypass vulnerability exists in the 'csvloghtml' function in th...

PT-2017-12329

Name of the Vulnerable Software and Affected Versions OpenEMR versions 5.0.0 and prior Description The issue allows attackers to bypass intended access restrictions. This is achieved via a crafted name in the csv log html function, located in the library/edihistory/edih csv inc.php file...