3 matches found
CVE-2018-15155
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/faxdispatch.php after modifying the "hylafaxenscript" global variable in interface/super/editglobals.php...
CVE-2018-15155
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/faxdispatch.php after modifying the "hylafaxenscript" global variable in interface/super/editglobals.php...
CVE-2018-15155
OS command injection in OpenEMR prior to 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by crafting a request to interfaces/fax/fax_dispatch.php after modifying the hylafax_enscript value in interface/super/edit_globals.php. Affected software: OpenEMR; vulnerable com...