2 matches found
CVE-2017-12064
The csvloghtml function in library/edihistory/edihcsvinc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name...
8.7CVSS0.01317EPSS
SaveExploits0References1
CVE-2017-12064: Improper Encoding or Escaping of Output
The csvloghtml function in library/edihistory/edihcsvinc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name...
7.5CVSS5.8AI score0.01317EPSS
SaveExploits0References2
20