5 matches found
CVE-2026-49142
OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that allows users with Clinician-level privileges to read and modify arbitrary database contents by submitting crafted values in the formicdcodes POST parameter to the...
CVE-2026-49142 OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]
OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that allows users with Clinician-level privileges to read and modify arbitrary database contents by submitting crafted values in the formicdcodes POST parameter to the...
EUVD-2026-112788
OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that allows users with Clinician-level privileges to read and modify arbitrary database contents by submitting crafted values in the formicdcodes POST parameter to the...
CVE-2026-49142
OpenEMR versions before 8.5.0 are vulnerable to an authenticated SQL injection within the Syndromic Surveillance module . Users with Clinician-level privileges can exploit the form_icd_codes[] POST parameter at the syndromicsurveillance/index endpoint to manipulate database content. By injecting ...
CVE-2026-49142
OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that allows users with Clinician-level privileges to read and modify arbitrary database contents by submitting crafted values in the formicdcodes POST parameter to the...