CVE-2021-41843

creationtimestamp| type| source ---|---|--- 2021-12-17 07:47:42+00:00| seen| https://t.me/cibsecurity/34176...

CVE-2021-41843

CVE-2021-41843 describes an authenticated SQL injection in the OpenEMR calendar search (calendar/index.php?module=PostCalendar&func=search). The vulnerability resides in the provider_id parameter, allowing an authenticated attacker to read data from all database tables. Affected product/version: ...

OpenEMR 6.0.0 / 6.1.0-dev SQL Injection

Trovent Security Advisory 2109-01 Authenticated SQL injection in OpenEMR calendar search Overview Advisory ID: TRSA-2109-01 Advisory version: 1.0 Advisory status: Public Advisory URL: https://trovent.io/security-advisory-2109-01 Affected product: OpenEMR web application Tested versions: 6.0.0,...

OpenEMR 6.0.0 / 6.1.0-dev SQL Injection Vulnerability

OpenEMR versions 6.0.0 and 6.1.0-dev suffer from an authenticated remote SQL injection vulnerability in the calendar search functionality. Authenticated SQL injection in OpenEMR calendar search Overview Advisory version: 1.0 Advisory status: Public Advisory URL:...