CVE-2020-29143

CVE-2020-29143 describes a SQL injection in OpenEMR’s interface/reports/non_reported.php, exploitable via the form_code parameter. The vulnerability affects OpenEMR prior to 5.0.2.5 and can be triggered by an authenticated remote attacker who can supply crafted input, leading to arbitrary SQL exe...