PT-2019-6164

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1 Patch 7 Description The issue is related to the lack of validation of XML object sequences in the make task function of OpenEMR, which can be exploited by a remote attacker to conduct SQL injection attacks. The...