2202 matches found
OpenEMR < 5.0.2 Multiple Vulnerabilities
OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...
CVE-2019-14529
OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eyemag/save.php...
CVE-2019-14529
OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eyemag/save.php...
Sql injection
OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eyemag/save.php...
CVE-2019-14529
OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eyemag/save.php...
CVE-2019-14529
OpenEMR before 5.0.2 is vulnerable to SQL injection in interface/forms/eye_mag/save.php due to lack of input validation. Root cause: unsafely constructed SQL statements in the affected PHP file. Impact: potential unauthorized SQL execution with high/severe impact as per CVSS indicators. Remediati...
PT-2019-13736 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 5.0.2 Description: The issue allows SQL Injection in the interface/forms/eye mag/save.php file. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...
EulerOS 2.0 SP2 : libarchive (EulerOS-SA-2019-1725)
According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenEMR version 5.0.0 contains a Cross Site Scripting XSS vulnerability in open-flash-chart.swf and posteddata.php that can result in . This...
OpenEMR < 5.0.1 Patch 7 Multiple Vulnerabilities
OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...
Directory traversal
An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/downloadtemplate.php...
CVE-2018-17179
An issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the maketask function in /interface/forms/eyemag/php/taskmanfunctions.php via /interface/forms/eyemag/taskman.php...
CVE-2018-17180
An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/downloadtemplate.php...
Sql injection
An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/paylib.php and the portalAudit function in /portal/lib/appsql.class.php...
CVE-2018-17180
An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/downloadtemplate.php...
CVE-2018-17181
An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/paylib.php and the portalAudit function in /portal/lib/appsql.class.php...
CVE-2018-17181
An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/paylib.php and the portalAudit function in /portal/lib/appsql.class.php...
CVE-2018-17179
An issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the maketask function in /interface/forms/eyemag/php/taskmanfunctions.php via /interface/forms/eyemag/taskman.php...
Sql injection
An issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the maketask function in /interface/forms/eyemag/php/taskmanfunctions.php via /interface/forms/eyemag/taskman.php...
CVE-2018-17181
OpenEMR before 5.0.1 Patch 7 contains SQL injection vulnerabilities in the SaveAudit function (/portal/lib/paylib.php) and the portalAudit function (/portal/lib/appsql.class.php). These flaws allow unauthenticated network access to potentially manipulate the database, with high/severe impact per ...