PT-2018-12910

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to "interface/fax/fax dispatch.php" after modifying the hylafax enscript global variable i...

PT-2018-9971

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 5.0.1 Description: The issue allows remote authenticated users to bypass intended access restrictions. This is achieved via the scan parameter in the interface/fax/fax dispatch.php file. Recommendations: For versions...

PT-2018-9210

Name of the Vulnerable Software and Affected Versions: OpenEMR version 5.0.0 Description: The issue is related to an OS Command Injection vulnerability in the fax dispatch.php file. This can be exploited by an authenticated attacker with any role, resulting in OS command injection. Recommendation...

PT-2012-2997

Name of the Vulnerable Software and Affected Versions OpenEMR version 4.1.0 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by injecting shell metacharacters in the file parameter of the interface/fax/fax dispatch.php script. Recommendations...