3 matches found
CVE-2018-10573
interface/fax/faxdispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan parameter...
CVE-2018-10573
interface/fax/faxdispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan parameter...
CVE-2018-1000019
CVE-2018-1000019 affects OpenEMR 5.0.0 via OS command injection in fax_dispatch.php. The authenticated attacker with any role could exploit this vulnerability. The issue has been fixed in OpenEMR 5.0.0 Patch 2 or higher (per connected advisories and the CVE description). Remediation is to upgrade...