OpenEMR Cross-Site Scripting (CVE-2022-1181)

A cross-site scripting vulnerability exists in OpenEMR. The vulnerability is due to insufficient sanitization of patients' first and last names in newcomprehensivesave.php...

CVE-2020-23829

interface/new/newcomprehensivesave.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution RCE on the hosting webserver by uploading a maliciously crafted image...

CVE-2020-23829: Unrestricted Upload of File with Dangerous Type

interface/new/newcomprehensivesave.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution RCE on the hosting webserver by uploading a maliciously crafted image...

OpenEMR 4.1.1 new_comprehensive_save.php SQL Injection

SQL Injection vulnerability in OpenEMR newcomprehensivesave.php formpubpid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

OpenEMR 4.1.1 Patch 14 - Multiple Vulnerabilities

No description provided by source. Exploit Title: OpenEMR 4.1.1 Patch 14 Multiple Vulnerabilities Date: Sep 17 2013 Exploit Author: xistence xistenceat0x90.nl Vendor Homepage: www.open-emr.org Tested on: CentOS 5.9 32-bit Affected Version : 4.1.1 Patch 14 and lower Fix: Upgrade to OpenEMR 4.1.2...