Openemr Security Vulnerabilities and Issues — Openemr CVE List

Lucene search

Open-emrOpenemr

3 matches found

CVE•added 2019/05/17 4:29 p.m.•39 views

CVE-2018-17179

An issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the make_task function in /interface/forms/eye_mag/php/taskman_functions.php via /interface/forms/eye_mag/taskman.php.

9.8CVSS9.9AI score0.08357EPSS

CVE•added 2019/05/17 4:29 p.m.•35 views

CVE-2018-17181

An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/paylib.php and the portalAudit function in /portal/lib/appsql.class.php.

9.8CVSS9.9AI score0.00015EPSS

CVE•added 2019/05/17 4:29 p.m.•29 views

CVE-2018-17180

An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/download_template.php.

5.3CVSS5.6AI score0.00098EPSS