EUVD-2022-52953

Malicious code in bioql PyPI...

EUVD-2022-52952

Malicious code in bioql PyPI...

The vulnerability of the phpgacl/acl_admin.tpl template in the PHP library for managing access in web applications. This is part of the phpGACL system used for managing medical documentation in OpenEMR. It allows attackers to perform cross-site scripting attacks.

The vulnerability of the phpgacl/acladmin.tpl template in the PHP library for managing access in web applications is related to the lack of protective measures taken when processing the action template parameters. Exploiting this vulnerability allows a remote attacker to perform cross-site...

CVE-2022-31495

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...

Cross site scripting

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...

CVE-2022-31495

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...

CVE-2022-31495

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...

CVE-2022-31495: Improper Neutralization of Input During Web Page Generation

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...

PT-2022-20763

Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue allows for XSS in the return page parameter of the gacl/admin/acl admin.php file. Recommendations For LibreHealth EHR Base version 2.0.0, avoid using the return page parameter in the...

CVE-2022-31494

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...

Cross site scripting

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...

CVE-2022-31494

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...

CVE-2022-31494

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...

CVE-2022-31493

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...

CVE-2022-31493

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...

CVE-2022-31493

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...

PT-2022-20761

Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue allows for XSS in the acl id parameter of the "gacl/admin/acl admin.php" API endpoint. Recommendations For LibreHealth EHR Base version 2.0.0, avoid using the acl id parameter in the...

CVE-2022-31494: Improper Neutralization of Input During Web Page Generation

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...

PT-2022-20762

Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue allows for XSS in the gacl/admin/acl admin.php action. Recommendations For LibreHealth EHR Base version 2.0.0, consider disabling access to the gacl/admin/acl admin.php action until a...

PT-2021-9639 · Phpgacl +1 · Phpgacl +1

Name of the Vulnerable Software and Affected Versions: phpGACL version 3.3.7 OpenEMR version 5.0.2 OpenEMR development version 6.0.0 commit babec93f600ff1394f91ccd512bcad85832eb6ce Description: An open redirect issue exists in the return page redirection functionality. A specially crafted HTTP...