Lucene search
Open-emrOpenemr7.0.2
2 matches found
CVE-2024-22611
OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controller.php.
9.8CVSS8.4AI score0.00002EPSS
CVE-2024-37734
An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid parameter.
9.8CVSS7.1AI score0.00629EPSS