Total 215 security vulnerabilities recorded for open-emr software and firmware.
OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.5 through 7.0.3.4 have a store...
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access ...
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a vulnerability ...
OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers can chain with a file upload to ...
An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credent...
OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting (XSS) vulnerabi...
OpenEMR is a free and open source electronic health records and medical practice management application. A logging oversight in versions prior to 7.0....
OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting (XSS) vulnerabi...
OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controlle...
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature i...
OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery (O...
OpenEMR is a free and open source electronic health records and medical practice management application. A stored XSS vulnerability in the Bronchitis ...
OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting...
OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hidden_subcategory is outp...
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Dir...
A stored cross-site scripting (XSS) vulnerability exists in openemr/openemr version 7.0.1. An attacker can inject malicious payloads into the 'inputBo...
An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid parameter....
An issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted script to the formid parameter in the ereq_form.php ...
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1....
Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1....
Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1....
Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1....
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1....
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1....