CVE-2011-5161

OpenEMR 4 is affected by an Unrestricted file upload vulnerability in the patient photograph feature. An attacker can upload a file with an executable extension followed by a safe extension and then access it via a direct request to the documents/ patient directory, allowing remote code execution...