CVE-2023-2566
Published May 8, 2023Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1.
Vendor archive
open-emr CVEs
Beta · best-effort218 CVEs tagged to vendor open-emr — 15 Critical, 99 High, 101 Medium, 3 Low, 0 Unrated.
CVE-2023-22974
Published Feb 22, 2023A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server.
CVE-2023-22973
Published Feb 22, 2023A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0 allows remote authenticated users to execute code via the formname parameter.
CVE-2023-22972
Published Feb 22, 2023A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in OpenEMR < 7.0.0 allows remote authenticated users to inject arbitrary…
CVE-2022-4733
Published Dec 27, 2022Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.2.
CVE-2022-4615
Published Dec 19, 2022Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2.
CVE-2022-4567
Published Dec 17, 2022Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.2.
CVE-2022-4506
Published Dec 15, 2022Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2.
CVE-2022-4505
Published Dec 15, 2022Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2.
CVE-2022-4504
Published Dec 15, 2022Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2.
CVE-2022-4503
Published Dec 15, 2022Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.0.2.
CVE-2022-4502
Published Dec 15, 2022Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2.
CVE-2022-2824
Published Aug 15, 2022Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2734
Published Aug 9, 2022Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2733
Published Aug 9, 2022Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2732
Published Aug 9, 2022Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2731
Published Aug 9, 2022Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2730
Published Aug 9, 2022Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2729
Published Aug 9, 2022Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2494
Published Jul 22, 2022Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.
CVE-2022-2493
Published Jul 22, 2022Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0.
CVE-2022-1461
Published Apr 25, 2022Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1.
CVE-2022-1459
Published Apr 25, 2022Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1.
CVE-2022-1458
Published Apr 25, 2022Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1.
CVE-2020-13567
Published Apr 18, 2022Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this v…
Showing 101-125 of 218 CVEsPage 5 of 9