2694 matches found
CVE-2023-22974
A Path Traversal in setup.php in OpenEMR 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server...
CVE-2023-22973
A Local File Inclusion LFI vulnerability in interface/forms/LBF/new.php in OpenEMR 7.0.0 allows remote authenticated users to execute code via the formname parameter...
CVE-2023-22972
A Reflected Cross-site scripting XSS vulnerability in interface/forms/eyemag/php/eyemagfunctions.php in OpenEMR 7.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the REQUESTURI...
CVE-2023-22974
A Path Traversal in setup.php in OpenEMR 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server...
PT-2023-18807 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.0 Description: A Local File Inclusion LFI issue in the interface/forms/LBF/new.php file allows remote authenticated users to execute code via the formname parameter. This can be exploited by authenticated users,...
PT-2023-18806 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.0 Description: A Reflected Cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the REQUEST URI. This affects the eye mag functions.php file in the...
OpenEMR path traversal vulnerability
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A local file inclusion vulnerability exists in versions of OpenEMR prior to 7.0.0,...
OpenEMR security vulnerabilities
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in OpenEMR version 7.0.0, which stems from the...
OpenEMR cross-site scripting vulnerability
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in OpenEMR version 7.0.0, which stems from the...
CVE-2022-4733
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...
OpenEMR cross-site scripting vulnerability
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in versions prior to OpenEMR 7.0.0.2,...
CVE-2022-4733 Cross-site Scripting (XSS) - Stored in openemr/openemr
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4733
OpenEMR OpenEMR prior to 7.0.0.2 is affected by a Stored XSS (CVE-2022-4733) in the OpenEMR repository. The issue stems from the application storing user input without proper sanitization, enabling script injection for other users. Public references confirm the vulnerability and indicate fixed ve...
CVE-2022-4733
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4733 Cross-site Scripting (XSS) - Stored in openemr/openemr
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4733: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...
PT-2022-28047 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.2 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation and then displays it to other users, allowing an attacker t...
OpenEMR Access Control Error Vulnerability (CNVD-2023-40915)
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An Access Control Error vulnerability exists in versions of OpenEMR prior to...