7 matches found
CVE-2019-3964
In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the docid parameter. This could allow an attacker to execute arbitrary code in the context of a user's session...
Cross site scripting
In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the docid parameter. This could allow an attacker to execute arbitrary code in the context of a user's session...
CVE-2019-3964
OpenEMR 5.0.1 and earlier are affected by a reflected XSS in controller.php, triggered via the doc_id parameter. The Red Hat, CNVD, CVE, NVD and OSV entries corroborate that this allows an attacker to execute arbitrary code in the context of a user session. Concrete exploit details, affected subv...
CVE-2019-3964
In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the docid parameter. This could allow an attacker to execute arbitrary code in the context of a user's session...
CVE-2010-4986
SQL injection vulnerability in detail.php in Simple Document Management System SDMS allows remote attackers to execute arbitrary SQL commands via the docid parameter...