CVE-2012-0992

OpenEMR 4.1.0 is vulnerable via interface/fax/fax_dispatch.php: the file parameter can be tainted to cause shell command execution. The root cause is improper sanitization of input fed to an exec() call, allowing remote authenticated users to run arbitrary commands. Verified details in multiple s...