CVE-2018-15154

OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/billing/sleobsearch.php after modifying the "printcommand" global variable in interface/super/editglobals.php...

CVE-2018-15154

OpenEMR versions prior to 5.0.1.4 are affected by an OS command injection vulnerability. An authenticated remote attacker can craft a request to interface/billing/sl_eob_search.php after modifying the print_command global in interface/super/edit_globals.php to execute arbitrary commands. The issu...