2694 matches found
OpenEMR Security Vulnerabilities
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in versions of OpenEMR prior to 7.0.2, which stems...
CVE-2024-26476
An issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted script to the formid parameter in the ereqform.php component...
OpenEMR XSS
The vulnerability of the software for managing medical organizations, OpenEMR, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...
OpenEMR Data Compromise
The software for managing medical organizations called OpenEMR is vulnerable due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality and integrity of data...
OpenEMR Authentication HTML Injection
The vulnerability of the software for managing medical organizations called OpenEMR is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform HTML injection attacks...
OpenEMR Access Control Logic Disruption
The vulnerability of the software for managing medical organizations like OpenEMR is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disrupt the logic of the application remotely...
OpenEMR Access Control
The vulnerability of the software for managing medical organizations like OpenEMR is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to remotely view, create, and edit protected information...
OpenEMR XSS
The vulnerability of the software for managing medical organizations like OpenEMR is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
OpenEMR Code Generation Redirect
The vulnerability of the OpenEMR software for managing medical organizations is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to redirect users to any arbitrary URL address...
OpenEMR XSS
The vulnerability of the software for managing medical organizations like OpenEMR is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
OpenEMR Auth Bypass Privilege Escalation
The vulnerability of the software for managing medical organizations called OpenEMR is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...
OpenEMR Access Control
The vulnerability of the software for managing medical organizations like OpenEMR is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to remotely view, modify, and delete protected information...
Critical SQL Injection Flaws Expose Gentoo Soko to Remote Code Execution
Multiple SQL injection vulnerabilities have been disclosed in Gentoo Soko that could lead to remote code execution RCE on vulnerable systems. "These SQL injections happened despite the use of an Object-Relational Mapping ORM library and prepared statements," SonarSource researcher Thomas...
OpenEMR Cross-Site Scripting Vulnerability
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in OpenEMR prior to version 7.0.1. The...
CVE-2023-2950
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2950
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2949
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2949
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1...