5 matches found
CVE-2018-16795
OpenEMR 5.0.1.3 allows Cross-Site Request Forgery CSRF via library/ajax and interface/super, as demonstrated by use of interface/super/managesitefiles.php to upload a .php file...
CVE-2018-16795
OpenEMR 5.0.1.3 allows Cross-Site Request Forgery CSRF via library/ajax and interface/super, as demonstrated by use of interface/super/managesitefiles.php to upload a .php file...
OpenEMR Cross-site Request Forgery Vulnerability
OpenEMR is an open source medical management system from the OpenEMR Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site request forgery vulnerability exists in OpenEMR version...
PT-2020-8564
Name of the Vulnerable Software and Affected Versions: OpenEMR version 5.0.1.3 Description: The issue allows Cross-Site Request Forgery CSRF via library/ajax and interface/super. This can be demonstrated by using the interface/super/manage site files.php endpoint to upload a .php file...
CVE-2018-16795: Cross-Site Request Forgery (CSRF)
OpenEMR 5.0.1.3 allows Cross-Site Request Forgery CSRF via library/ajax and interface/super, as demonstrated by use of interface/super/managesitefiles.php to upload a .php file...