OpenEMR find_appt_popup_user.php SQL Injection

SQL Injection vulnerability in OpenEMR findapptpopupuser.php catid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

CVE-2018-15143

OpenEMR is affected by SQL injection in portal/find_appt_popup_user.php. Versions prior to 5.0.1.4 allow a remote attacker to inject SQL via the catid or providerid parameters, enabling arbitrary SQL commands. This is documented across multiple sources (NVD entry CVE-2018-15143 and related record...