2694 matches found
CVE-2022-4505
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4506
Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4502
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4503
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.0.2...
Authorization
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2...
Cross site scripting
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.0.2...
Input validation
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4504
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2...
PT-2022-27374
Name of the Vulnerable Software and Affected Versions openemr versions prior to 7.0.0.2 Description The issue is related to Cross-site Scripting XSS - Reflected in the GitHub repository openemr/openemr. This type of attack occurs when an application includes user input in the output it sends to a...
CVE-2022-4503 Cross-site Scripting (XSS) - Generic in openemr/openemr
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4504 Improper Input Validation in openemr/openemr
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4502
CVE-2022-4502 affects OpenEMR (openemr/openemr) with a reflected XSS vulnerability in versions before 7.0.0.2. Connected sources detail two specific PoCs in the Messages module: (1) messages.php parameter go/stage handling that echoes unsafely printed input, and (2) save.php returning a JSON resp...
CVE-2022-4504
CVE-2022-4504 affects OpenEMR (openemr/openemr) prior to version 7.0.0.2 due to improper input validation. CVSS 3.1/3.0 scores indicate HIGH impact on availability (A) with no impact on confidentiality or integrity. Exploitation details are not provided in the documents; the Huntr entry notes a P...
CVE-2022-4503
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.0.2...
CVE-2022-4504 Improper Input Validation in openemr/openemr
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2...
PT-2022-27385 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.2 Description: The issue is related to improper input validation in the GitHub repository openemr/openemr. Recommendations: For versions prior to 7.0.0.2, update to version 7.0.0.2 or later to resolve the issue...