PT-2018-12905

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description A SQL injection issue allows a remote authenticated attacker to execute arbitrary SQL commands. The issue is related to the temporary files dir variable in interface/super/edit globals.php...