OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-32189)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site scripting vulnerability exists in OpenEMR 5.0.1-6, which can be exploited by an attacker to execute client-side code...

CVE-2019-8368

OpenEMR v5.0.1-6 allows XSS...

CVE-2019-8368

OpenEMR v5.0.1-6 allows XSS...

Cross site scripting

OpenEMR v5.0.1-6 allows XSS...

CVE-2019-8371

OpenEMR v5.0.1-6 allows code execution...

CVE-2019-8371

OpenEMR v5.0.1-6 allows code execution...

Design/Logic Flaw

OpenEMR v5.0.1-6 allows code execution...

CVE-2019-8368

CVE-2019-8368 affects OpenEMR v5.0.1-6 and is a cross-site scripting (XSS) vulnerability. Red Hat/CNVD/OSV listings corroborate the OpenEMR XSS finding. The core issue is a reflected/stored XSS vector in the OpenEMR 5.0.1-6 codebase (exact component/file not specified in the provided documents). ...

CVE-2019-8368

OpenEMR v5.0.1-6 allows XSS...

CVE-2019-8371

OpenEMR v5.0.1-6 is affected by CVE-2019-8371, which allows code execution. The OpenEMR entry is corroborated across multiple sources (NVD and Red Hat/CNVD-like records) with a CVSSv3.1 base score of 7.2 (HIGH), using a Network attack vector, Low attack complexity, no user interaction, and Privil...

CVE-2019-8371

OpenEMR v5.0.1-6 allows code execution...

PT-2019-18990

Name of the Vulnerable Software and Affected Versions OpenEMR version 5.0.1-6 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website. Recommendations For OpenEMR version 5.0.1-6, at the moment, there is no...

PT-2019-18993

Name of the Vulnerable Software and Affected Versions OpenEMR version 5.0.1-6 Description The issue allows code execution. Recommendations For OpenEMR version 5.0.1-6, at the moment, there is no information about a newer version that contains a fix for this issue...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-28406)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site scripting vulnerability in the foreignid parameter in controller.php in OpenEMR 5.0.1 and earlier versions can be exploited by an attacker to execute arbitrary code in the context of ...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-28407)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site scripting vulnerability in the documentid parameter in controller.php in OpenEMR 5.0.1 and earlier versions can be exploited by an attacker to execute arbitrary code in the context of...

OpenEMR Directory Traversal Vulnerability (CNVD-2019-28405)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A directory traversal vulnerability in the patient file download interface in OpenEMR 5.0.1 and earlier versions can be exploited by an authenticated attacker to download arbitrary files from the...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-28408)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site scripting vulnerability in the docid parameter in controller.php in OpenEMR 5.0.1 and earlier versions can be exploited by an attacker to execute arbitrary code in the context of a us...

OpenEMR Command Injection Vulnerability (CNVD-2019-28410)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A command injection vulnerability exists in OpenEMR 5.0.1 and earlier versions, which can be exploited by an authenticated attacker to execute arbitrary commands on the host system via the "Scanne...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-28409)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site scripting vulnerability in the patientid parameter in controller.php in OpenEMR 5.0.1 and earlier versions can be exploited by an attacker to execute arbitrary code in the context of ...

CVE-2019-3968

In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the Scanned Forms interface when creating a new form...