CVE-2019-16404

Authenticated SQL Injection in interface/forms/eyemag/js/eyebase.php in OpenEMR through 5.0.2 allows a user to extract arbitrary data from the openemr database via a non-parameterized INSERT INTO statement, as demonstrated by the providerID parameter...

CVE-2019-16404

OpenEMR is affected by a SQL Injection in interface/forms/eye_mag/js/eye_base.php (through OpenEMR 5.0.2 and earlier). The vulnerability arises from a non-parameterized INSERT INTO statement involving the providerID parameter, allowing an authenticated user to extract arbitrary data from the Open...