CVE-2018-15145

Multiple SQL injection vulnerabilities in portal/addediteventuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 eid, 2 userid, or 3 pid parameter...

CVE-2018-15143

OpenEMR is affected by SQL injection in portal/find_appt_popup_user.php. Versions prior to 5.0.1.4 allow a remote attacker to inject SQL via the catid or providerid parameters, enabling arbitrary SQL commands. This is documented across multiple sources (NVD entry CVE-2018-15143 and related record...

CVE-2018-15144

CVE-2018-15144 describes an SQL injection in OpenEMR’s interface/de_identification_forms/find_drug_popup.php for versions before 5.0.1.4. A remote authenticated attacker can execute arbitrary SQL via the search_term parameter. Affected: OpenEMR 5.0.1.3 and earlier. Root cause: unsafely constructe...

CVE-2018-15145

OpenEMR before 5.0.1.4 contains multiple SQL injection vulnerabilities in portal/add_edit_event_user.php that allow a remote attacker to execute arbitrary SQL commands via the (1) eid, (2) userid, or (3) pid parameters. This affects OpenEMR versions prior to 5.0.1.4. Impact is the ability to mani...

CVE-2018-15141

OpenEMR is affected by a directory traversal vulnerability in portal/import_template.php prior to version 5.0.1.4. A remote attacker authenticated in the patient portal can delete arbitrary files by supplying a crafted docid while mode=delete. Exploitation evidence exists (e.g., PoC in exploit-db...

CVE-2018-15142

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute arbitrary PHP code by writing a file with a PHP extension via the "docid" and "content" parameters and accessing it in the traversed...

CVE-2018-15142

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute arbitrary PHP code by writing a file with a PHP extension via the "docid" and "content" parameters and accessing it in the traversed...

CVE-2018-15143

Multiple SQL injection vulnerabilities in portal/findapptpopupuser.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the 1 catid or 2 providerid parameter...

CVE-2018-15140

CVE-2018-15140 : OpenEMR before 5.0.1.4 is vulnerable to a directory traversal in portal/import_template.php. An attacker authenticated in the patient portal can read arbitrary files by supplying a crafted docid when mode is set to get. The issue is a file disclosure in the portal workflow, not a...

CVE-2018-15140

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get...

CVE-2018-15142

OpenEMR prior to 5.0.1.4 has a directory-traversal vulnerability in portal/import_template.php that allows an authenticated patient-portal user to write a PHP file via docid/content and access it in the traversed directory, resulting in arbitrary PHP code execution. Affected versions are older th...

CVE-2018-15139

Unrestricted file upload in interface/super/managesitefiles.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory...

CVE-2018-15139

Unrestricted file upload in interface/super/managesitefiles.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory...

CVE-2018-15139

OpenEMR prior to 5.0.1.4 is affected by Unrestricted file upload in interface/super/manage_site_files.php. An authenticated remote attacker can upload a PHP file via the images upload form and access it in the images directory to execute arbitrary PHP code. Impact is high (C/H I/H A/H as per CVSS...

PT-2018-12899

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote attacker to execute arbitrary SQL commands. This can be achieved via the eid, userid, or pid parameter in the "portal/add edit event user.php" file. Recommendations For...

PT-2018-12895

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote attacker authenticated in the patient portal to delete arbitrary files. This is achieved via the docid parameter when the mode is set to delete in the /portal/import...

PT-2018-12894

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote attacker authenticated in the patient portal to read arbitrary files. This is achieved via the docid parameter when the mode is set to get in the /portal/import template.p...

PT-2018-12898

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote authenticated attacker to execute arbitrary SQL commands. This is achieved via the search term parameter in the interface/de identification forms/find drug popup.php file...

CVE-2018-15141: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete...

CVE-2018-15140: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get...