CVE-2026-33934

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have a missing authorization check in portal/sign/lib/show-signature.php that allows any authenticated patient portal user to retrieve the drawn signature image of an...

CVE-2018-5992

SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request...

CVE-2018-5992: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request...

PT-2018-17278

Name of the Vulnerable Software and Affected Versions: Joomla! Staff Master component through version 1.0 RC 1 Description: The issue exists due to SQL Injection in the Staff Master component for Joomla!. This occurs via the name parameter in a "view=staff" request. Recommendations: For Joomla!...