CVE-2013-4620

CVE-2013-4620 is an XSS vulnerability in OpenEMR 4.1.1, exploitable via the note parameter in interface/main/onotes/office_comments_full.php. CVSSv2 base score 4.3 (MEDIUM). Affected product/version: OpenEMR 4.1.1 and older patches; impact is injected script/HTML content. Patch-12 (OpenEMR 4.1.1 ...

OpenEMR 4.1.1 patch-12 Cross Site Scripting / SQL Injection

Trustwave SpiderLabs Security Advisory TWSL2013-018: Multiple Vulnerabilities in OpenEMR Published: 07/12/13 Version: 1.0 Vendor: OEMR www.open-emr.org Product: OpenEMR Version affected: 4.1.1 patch-12 and prior Product description: OpenEMR is an ONC-ATB Ambulatory EHR 2011-2012 certified...

CVE-2013-4620

creationtimestamp| type| source ---|---|--- 2013-07-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38654...