PT-2026-21981

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.0.0 Description OpenEMR is an electronic health records and medical practice management application. Insufficient input validation in the prescription listing functionality allows authenticated attackers to exploit ...

EUVD-2020-21521

Malware in sbrugna...

EUVD-2018-7025

Malware in sbrugna...

CVE-2022-2732

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-4504

Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2...

CVE-2022-4615

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2021-22942)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A stored cross-site scripting vulnerability exists in OpenEMR versions 5.0.2 - 6.0.0. The vulnerability stems from not properly validating user input. An attacker can exploit the vulnerability to...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2021-22945)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site scripting vulnerability exists in OpenEMR versions 4.2.0 - 6.0.0. The vulnerability stems from not properly validating user input. An attacker can exploit the vulnerability to execute...

CVE-2018-1000019

OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in faxdispatch.php that can result in OS command injection by an authenticated attacker with any role. This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher...