PT-2018-12908

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to "interface/main/daemon frame.php" after modifying the hylafax server global variable in...

PT-2018-12905

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description A SQL injection issue allows a remote authenticated attacker to execute arbitrary SQL commands. The issue is related to the temporary files dir variable in interface/super/edit globals.php...