2 matches found
CVE-2020-29139
A SQL injection vulnerability in interface/main/finder/patientselect.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the searchFields parameter...
8.6CVSS0.01841EPSS
SaveExploits1References4
CVE-2020-29139: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in interface/main/finder/patientselect.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the searchFields parameter...
7.2CVSS6.4AI score0.01841EPSS
SaveExploits1References2
20