PT-2021-11647

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 5.0.2.5 Description: A SQL injection issue allows a remote authenticated attacker to execute arbitrary SQL commands. The issue is related to the form code parameter in the interface/reports/non reported.php file...