CVE-2022-1179: Improper Neutralization of Input During Web Page Generation

Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...

CVE-2022-1177: Insufficient Granularity of Access Control

Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0...

OpenEMR 跨站脚本漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...

PT-2022-13693

Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.1.0 Description The issue allows an accounting user to download patient reports in openemr. This is a problem because accounting users should not have access to patient reports. Recommendations For versions prior to...

PT-2022-13697

Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.0.0.2 Description The issue is related to Stored Cross Site Scripting in the GitHub repository openemr/openemr. Recommendations For versions prior to 6.0.0.2, update to version 6.0.0.2 or later to resolve the issue...

CVE-2022-1181: Improper Neutralization of Input During Web Page Generation

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2...

OpenEMR 跨站脚本漏洞

OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...

Non-Privilege User Can View Patient’s Disclosures

Vulnerability Type Insecure Direct Object Reference Affected URL https://localhost/openemr-6.0.0/ /interface/patientfile/summary/recorddisclosure.php?editlid=X Method GET Parameter editlid Authentication Required? Yes Issue Summary Non-privilege users accounting, front office can view patient’s...

Missing Function Level Access Control

Vulnerability Type Missing Function Level Access Control Affected URL 62 vulnerable instances as listed in Table 1 Authentication Required? Yes Issue Summary Web applications usually only show functionality that a user has the need for and right to use in the UI. However, this is not the case for...

Non Privilege User can Enable or Disable Registered

Vulnerability Type Insecure Direct Object Reference Affected URL https://localhost/openemr-6.0.0/interface/modules/zendmodules/public/Installer/manage Affected Parameters “modAction=enabled” Authentication Required? Yes Issue Summary Non-privilege users accounting & front-office can disable and...

CVE-2022-24643

A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...

CVE-2022-24643

A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...

Cross site scripting

A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...

CVE-2022-24643

A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...

CVE-2022-24643

CVE-2022-24643 is a stored cross-site scripting (XSS) vulnerability in OpenEMR Hospital Information Management System v6.0.0. The NVD description states a stored XSS flaw, with CVSSv3.1 base score 5.4 (Network, Low user interaction, Privileges Required: Low, Scope: Changed; Confidentiality/Integr...

CVE-2022-24643

A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...

CVE-2022-24643

A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...

PT-2022-16770

Name of the Vulnerable Software and Affected Versions OpenEMR Hospital Information Management System version 6.0.0 Description A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System. This issue allows for the storage of malicious scripts that...

OpenEMR 跨站脚本漏洞

OpenEMR is an open source medical management system from the OpenEMR Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in the OpenEMR Hospital Information...

CVE-2022-24643: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...