2695 matches found
PT-2025-12831
Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 7.3.0 Description The issue concerns a Directory Traversal vulnerability in the Load Code feature of OpenEMR, a free and open source electronic health records and medical practice management application. Recommendatio...
CVE-2025-29789: Relative Path Traversal
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue...
phpGACL Template XSS
The vulnerability of the phpgacl/acladmin.tpl template in the PHP library for managing access in web applications is related to the lack of protective measures taken when processing the action template parameters. Exploiting this vulnerability allows a remote attacker to perform cross-site...
phpGACL Template XSS
The vulnerability of the phpgacl/assigngroup.tpl template in the PHP library for managing access in web applications is related to the lack of protective measures taken when processing the groupid template parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site...
phpGACL Template XSS
The vulnerability of the phpgacl/acladmin.tpl PHP template used in the phpGACL access control library for web applications in the OpenEMR medical documentation system is related to the lack of protection for the website structure when processing the aclid template parameter. Exploiting this...
CVE-2022-1178
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
CVE-2022-1459
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1181
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2...
CVE-2022-1461
Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1458
Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-2733
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2824
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2734
Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2732
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2493
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-4504
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4506
Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4502
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...