OpenEMR < 5.0.1 Multiple Vulnerabilities (Mar 2018)

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

CVE-2018-10571

CVE-2018-10571 covers multiple reflected XSS vulnerabilities in OpenEMR prior to version 5.0.1 . The issues allow remote attackers to inject arbitrary scripts/HTML via a long list of parameters across various endpoints (e.g., finder_navigation.php, get_claim_file.php, sl_eob_*.php, find_code_popu...