OpenEMR 5.0.0 RCE

Remote command execution vulnerability in OpenEMR faxdispatch.php formfilename parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2017-35442)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in OpenEMR 5.0.0 and prior...

OpenEMR Elevation of Privilege Vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An elevation of privilege vulnerability exists in OpenEMR 5.0.1-dev and...

Cross site scripting

The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting XSS vulnerabilities affecting version 5.0.0 and prior versions. These vulnerabilities could allow remote authenticated attackers to inject arbitrary web script or HTML...

CVE-2017-1000240

The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting XSS vulnerabilities affecting version 5.0.0 and prior versions. These vulnerabilities could allow remote authenticated attackers to inject arbitrary web script or HTML...

CVE-2017-1000241

The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. This vulnerability can allow an authenticated non-administrator users to view and modify information only accessible to administrators...

Privilege escalation

The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. This vulnerability can allow an authenticated non-administrator users to view and modify information only accessible to administrators...

CVE-2017-1000240

The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting XSS vulnerabilities affecting version 5.0.0 and prior versions. These vulnerabilities could allow remote authenticated attackers to inject arbitrary web script or HTML...

CVE-2017-1000241

The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. This vulnerability can allow an authenticated non-administrator users to view and modify information only accessible to administrators...

CVE-2017-1000240

The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting XSS vulnerabilities affecting version 5.0.0 and prior versions. These vulnerabilities could allow remote authenticated attackers to inject arbitrary web script or HTML...

CVE-2017-1000241

The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. This vulnerability can allow an authenticated non-administrator users to view and modify information only accessible to administrators...

CVE-2017-1000241

CVE-2017-1000241 concerns OpenEMR versions 5.0.0, 5.0.1-dev and prior, with a vertical privilege-escalation flaw that may allow an authenticated non-administrator to view and modify information normally restricted to administrators. The provided documents confirm the affected product and general ...

CVE-2017-1000240

The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting XSS vulnerabilities affecting version 5.0.0 and prior versions. These vulnerabilities could allow remote authenticated attackers to inject arbitrary web script or HTML...

CVE-2017-1000240

CVE-2017-1000240 impacts OpenEMR, describing multiple reflected and stored XSS vulnerabilities in OpenEMR 5.0.0 and earlier. Exploitation could allow remote authenticated attackers to inject arbitrary web script or HTML. The connected records corroborate XSS applicability across multiple CVE trac...

CVE-2017-1000241: Improper Privilege Management

The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. This vulnerability can allow an authenticated non-administrator users to view and modify information only accessible to administrators...

PT-2017-10933

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.0 Description The issue affects the OpenEMR application, allowing remote authenticated attackers to inject arbitrary web script or HTML due to multiple reflected and stored Cross-Site Scripting XSS vulnerabilities...

CVE-2017-1000240: Improper Neutralization of Input During Web Page Generation

The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting XSS vulnerabilities affecting version 5.0.0 and prior versions. These vulnerabilities could allow remote authenticated attackers to inject arbitrary web script or HTML...

PT-2017-10934

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1-dev Description The issue allows authenticated non-administrator users to view and modify information that is only accessible to administrators, due to a vertical privilege escalation. Recommendations For OpenEM...

OpenEMR elevation of privilege vulnerability (CNVD-2017-35899)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An elevation of privilege vulnerability exists in versions of OpenEMR pri...

OpenEMR < 5.0.0 Patch 5 Database Disclosure Vulnerability

OpenEMR is prone to a database disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr";...