PT-2018-12910

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to "interface/fax/fax dispatch.php" after modifying the hylafax enscript global variable i...

PT-2018-9971

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 5.0.1 Description: The issue allows remote authenticated users to bypass intended access restrictions. This is achieved via the scan parameter in the interface/fax/fax dispatch.php file. Recommendations: For versions...

PT-2012-2997

Name of the Vulnerable Software and Affected Versions OpenEMR version 4.1.0 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by injecting shell metacharacters in the file parameter of the interface/fax/fax dispatch.php script. Recommendations...