CVE-2024-40324

CVE-2024-40324 Description A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return CR and Line Feed LF characters into input fields, leading to HTTP response splitting and header manipulation. Vulnerability Type CRLF Vendor of Product E-Staff Affected Product Cod...

CVE-2022-43271

CVE-2022-43271 Stored Cross-Site Scripting XSS Product: Move CRM https://inhabit.com.au/Move-Real-Estate-CRM-Software Discovery date: 2/8/2022 Fix date: 4/8/2022 Affected Version: version 4, build 260 Fixed Version: version 4, build 261 Description: The vulnerability was discovered in the 'staff...

CVE-2021-46075

CVE-2021-46075 Exploit Title: Vehicle Service Management System - 'Multiple' Privilege Escalation Leads to CRUD Operations Exploit Author: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH References:...

Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations

CVE-2021-46075 Exploit Title: Vehicle Service Management System - 'Multiple' Privilege Escalation Leads to CRUD Operations Exploit Author: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH References:...

InvenTree-Path-Traversal-CVE-2026-33531

CVE-2026-33531 — Path Traversal in InvenTree Report Templates Advisory: GHSA-rhc5-7c3r-c769 CVE: CVE-2026-33531 Severity: Medium Published: 2026-03-20 Credit: @alonaki Description A path traversal vulnerability in the report template engine allows a staff-level user to read arbitrary files from t...

CVE-2026-128033

OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an information disclosure vulnerability in MageRssModelResourceOrder::getAllCommentCollection, which omits the isvisibleonfront filter for invoice, shipment and credit-memo comments. Authenticated customers can open...

CVE-2026-126484

OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability in printedfeesheet.php that allows authenticated portal patients to inject script by setting unescaped appointment comments pchometext. Attackers can submit HTML payloads via the formcomments field in addediteventuser.php...

CVE-2026-126472

OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that allows any authenticated low-privilege staff user to retrieve other patients' C-CDA documents. Attackers can request the view or dl action with sequential pid values and their own CSRF token to...

CVE-2026-126444

OpenEMR before 8.5.0 contains a missing authorization vulnerability in the Ensora eRx integration that allows authenticated staff without patients/rx permission to access prescription data by directly requesting eRx.php. Attackers can expose selected patients' demographic, medication, and allergy...

CVE-2026-126430

OpenEMR before 8.5.0 contains an sql injection vulnerability that allows any authenticated core user to inject SQL by supplying crafted patientdata field names to the CCR revandapprove controller. Attackers can embed scalar subqueries in the UPDATE patientdata SET clause to read staff password...

CVE-2026-126430 OpenEMR before 8.5.0 SQL Injection via CCR revandapprove Field Names

OpenEMR before 8.5.0 contains an sql injection vulnerability that allows any authenticated core user to inject SQL by supplying crafted patientdata field names to the CCR revandapprove controller. Attackers can embed scalar subqueries in the UPDATE patientdata SET clause to read staff password...

CVE-2026-126430

OpenEMR versions before 8.5.0 are vulnerable to an SQL Injection vulnerability within the CCR revandapprove controller . This flaw occurs because the application fails to properly neutralize patient_data field names . An authenticated core user can exploit this by supplying crafted field names to...

EUVD-2026-125013

OpenEMR before 8.5.0 contains an sql injection vulnerability that allows any authenticated core user to inject SQL by supplying crafted patientdata field names to the CCR revandapprove controller. Attackers can embed scalar subqueries in the UPDATE patientdata SET clause to read staff password...

CVE-2026-126444 OpenEMR before 8.5.0 Missing Authorization in Ensora eRx via eRx.php

OpenEMR before 8.5.0 contains a missing authorization vulnerability in the Ensora eRx integration that allows authenticated staff without patients/rx permission to access prescription data by directly requesting eRx.php. Attackers can expose selected patients' demographic, medication, and allergy...

EUVD-2026-124997

OpenEMR before 8.5.0 contains a missing authorization vulnerability in the Ensora eRx integration that allows authenticated staff without patients/rx permission to access prescription data by directly requesting eRx.php. Attackers can expose selected patients' demographic, medication, and allergy...

CVE-2026-126444 OpenEMR before 8.5.0 Missing Authorization in Ensora eRx via eRx.php

OpenEMR before 8.5.0 contains a missing authorization vulnerability in the Ensora eRx integration that allows authenticated staff without patients/rx permission to access prescription data by directly requesting eRx.php. Attackers can expose selected patients' demographic, medication, and allergy...

CVE-2026-126444

OpenEMR versions prior to 8.5.0 are vulnerable to a missing authorization flaw within the Ensora eRx integration . Specifically, authenticated staff members who lack the necessary patients/rx permissions can bypass access controls by directly requesting the eRx.php endpoint. This allows unauthori...

CVE-2026-126465 OpenEMR before 8.5.0 SQL Injection via OnsiteActivityView _BitwiseAnd Criteria

OpenEMR before 8.5.0 contains an SQL injection vulnerability in the patient portal api/onsiteactivityviews endpoint that allows any authenticated staff user to inject SQL through unquoted IdBitwiseAnd Criteria values. Attackers can close the bitwise parenthesis and append OR or UNION SELECT claus...

EUVD-2026-124952

OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that allows any authenticated low-privilege staff user to retrieve other patients' C-CDA documents. Attackers can request the view or dl action with sequential pid values and their own CSRF token to...

CVE-2026-126472

OpenEMR versions before 8.5.0 are affected by a missing authorization vulnerability in ccdaservice/ccda_gateway.php. This flaw allows an authenticated low-privilege staff user to access and exfiltrate C-CDA documents belonging to other patients. An attacker can perform this action by requesting v...