EUVD-2026-119550

OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module disposeDocument action via an unvalidated filepath parameter. Authenticated low-privilege users can read sqlconf.php to recover database credentials and write arbitrary files as the web...

CVE-2026-124450

OpenEMR versions prior to 8.3.0 are vulnerable to broken access control and path traversal within the fax/sms module's disposeDocument action. The root cause is an unvalidated file_path parameter , which allows authenticated low-privilege users to read sensitive files like sqlconf.php to recover ...

CVE-2026-124450: openemr: OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module…

OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module disposeDocument action via an unvalidated filepath parameter. Authenticated low-privilege users can read sqlconf.php to recover database credentials and write arbitrary files as the web...

OpenEMR 7.0.2 Authenticated Arbitrary File Read

This Metasploit auxiliary module targets an authenticated arbitrary file read vulnerability in the Fax/SMS module of OpenEMR version 7.0.2 and related builds...

📄 OpenEMR 7.0.2 Authenticated Arbitrary File Read

This Metasploit auxiliary module targets an authenticated arbitrary file read vulnerability in the Fax/SMS module of OpenEMR version 7.0.2 and related builds. ================================================================================================================================== | Title...

OpenEMR 7.0.2 - Arbitrary File Read

Exploit Title: OpenEMR 7.0.2 - Arbitrary File Read Google Dork: intitle:"OpenEMR" inurl:"interface/login/login.php" Date: 2026-06-06 Exploit Author: doany1 Vendor Homepage: https://www.open-emr.org/ Software Link:...