OpenEMR find_appt_popup_user.php SQL Injection

SQL Injection vulnerability in OpenEMR findapptpopupuser.php catid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

CVE-2018-15143

Multiple SQL injection vulnerabilities in portal/findapptpopupuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 catid or 2 providerid parameter...

CVE-2018-15143

OpenEMR is affected by SQL injection in portal/find_appt_popup_user.php. Versions prior to 5.0.1.4 allow a remote attacker to inject SQL via the catid or providerid parameters, enabling arbitrary SQL commands. This is documented across multiple sources (NVD entry CVE-2018-15143 and related record...

CVE-2018-15143: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in portal/findapptpopupuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 catid or 2 providerid parameter...