CVE-2019-17409

Reflected XSS exists in interface/forms/eyemag/view.php in OpenEMR 5.x before 5.0.2.1 ia the id parameter...

CVE-2019-17409

Reflected XSS exists in interface/forms/eyemag/view.php in OpenEMR 5.x before 5.0.2.1 ia the id parameter...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-43372)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A reflected cross-site scripting vulnerability exists in interface/forms/eyemag/view.php in OpenEMR. An attacker can exploit this vulnerability to execute arbitrary code in the context of a user...

PT-2019-15139

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.2.1 Description A reflected XSS issue exists in the interface/forms/eye mag/view.php file, specifically affecting the id parameter. Recommendations For versions prior to 5.0.2.1, update to version 5.0.2.1 or later...

CVE-2019-16862: Improper Neutralization of Input During Web Page Generation

Reflected XSS in interface/forms/eyemag/view.php in OpenEMR 5.x before 5.0.2.1 allows a remote attacker to execute arbitrary code in the context of a user's session via the pid parameter...

CVE-2019-17409: Improper Neutralization of Input During Web Page Generation

Reflected XSS exists in interface/forms/eyemag/view.php in OpenEMR 5.x before 5.0.2.1 ia the id parameter...

CVE-2019-16404: Improper Neutralization of Special Elements used in an SQL Command

Authenticated SQL Injection in interface/forms/eyemag/js/eyebase.php in OpenEMR through 5.0.2 allows a user to extract arbitrary data from the openemr database via a non-parameterized INSERT INTO statement, as demonstrated by the providerID parameter...

PT-2019-14661

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.3 Description The issue allows a user to extract arbitrary data from the database via a non-parameterized INSERT INTO statement. This can be achieved by exploiting the providerID parameter in the interface/forms/e...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-43375)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A reflected cross-site scripting vulnerability exists in interface/forms/eyemag/view.php in OpenEMR. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via the id...

PT-2019-14837

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.2.1 Description The issue allows a remote attacker to execute arbitrary code in the context of a user's session. This is achieved via the pid parameter in the interface/forms/eye mag/view.php file. Recommendations...

OpenEMR < 5.0.2.1 Multiple Vulnerabilities

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

CVE-2019-17197

OpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library/clinicalrules.php that affects library/patient.inc...

CVE-2019-17197

OpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library/clinicalrules.php that affects library/patient.inc...

Sql injection

OpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library/clinicalrules.php that affects library/patient.inc...

CVE-2019-17197

OpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library/clinicalrules.php that affects library/patient.inc...

CVE-2019-17197

OpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library/clinicalrules.php that affects library/patient.inc...

CVE-2019-17197

OpenEMR up to version 5.0.2 is affected by an SQL Injection in the Lifestyle demographic filter criteria within library/clinical_rules.php (affecting library/patient.inc). Root cause: unsafely constructed SQL in the demographic filtering pathway. Impact: potential unauthorized data exposure or mo...

PT-2019-14996

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.3 Description The issue affects the Lifestyle demographic filter criteria in library/clinical rules.php, which is part of the library/patient.inc. This is due to SQL Injection. Recommendations For OpenEMR versions...

CVE-2019-17197: Improper Neutralization of Special Elements used in an SQL Command

OpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library/clinicalrules.php that affects library/patient.inc...

OpenEMR Path Traversal Vulnerability

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A path traversal vulnerability exists in the 'fileName' parameter of the...