OpenEMR SQL Injection Vulnerability (CNVD-2019-10145)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A SQL injection vulnerability exists in portal/addediteventuser.php in OpenEMR versions prior to 5.0.1.4, which can be exploited by a remote attacker to execute arbitrary SQL commands via the eid,...