CVE-2018-1000220

CVE-2018-1000220 is rejected/not used; a reservation duplicate of CVE-2014-5462.

CVE-2014-5462

OpenEMR 4.1.2 (Patch 7) and earlier contain multiple SQL injection vulnerabilities exploitable by remote authenticated users. Affected components include interface/super/edit_layout.php (layout_id), interface/reports/prescriptions_report.php (several), interface/billing/edit_payment.php, interfac...