2693 matches found
Cross-site Scripting (XSS) - Stored
Description openemr / openemr is vulnerable to Cross-site Scripting XSS - Stored Proof of Concept // Poc alertdocument.cookie steps to reproduce: 1 login open emr patient portal https://demo.openemr.io/openemr/portal/index.php 2 goto my profile in https://demo.openemr.io/openemr/portal/home.php...
OpenEMR Cross-Site Scripting Vulnerability (CNVD-2022-61334)
OpenEMR is an open source medical management system from the OpenEMR community. A cross-site scripting vulnerability exists in versions of OpenEMR prior to 6.1.0.1, which stems from a lack of data validation filters for user-supplied data and output data in the file name on the "Upload Document...
CVE-2022-1461
Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...
Design/Logic Flaw
Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1461
Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1461 Non Privilege User can Enable or Disable Registered in openemr/openemr
Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1461
CVE-2022-1461 affects OpenEMR prior to 6.1.0.1. A non-privileged user can enable or disable registration for OpenEMR modules via the vulnerable endpoint in the Installer module (openemr/interface/modules/zend_modules/public/Installer/manage), indicating an improper authorization/control flow vuln...
CVE-2022-1461 Non Privilege User can Enable or Disable Registered in openemr/openemr
Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1458
Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1458
Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1459
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1459
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
Cross site scripting
Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1...
Design/Logic Flaw
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1459 Non-Privilege User Can View Patient’s Disclosures in openemr/openemr
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1459 Non-Privilege User Can View Patient’s Disclosures in openemr/openemr
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1459
CVE-2022-1459 affects OpenEMR prior to 6.1.0.1. The issue is an Insecure Direct Object Reference that allows a non-privilege user to view patient disclosures via the OpenEMR web interface (example endpoint: interface/patient_file/summary/record_disclosure.php?editlid=…). This exposes confidential...
CVE-2022-1459
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...