PT-2021-11646

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 5.0.2.5 Description: A SQL injection issue allows a remote authenticated attacker to execute arbitrary SQL commands via the schedule facility parameter when restrict user facility=on is in global settings. This occur...