Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute arbitrary PHP code…

Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by…

interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlistname parameter

interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan parameter

OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can result in OS command injection by an authenticated attacker with any role

OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application

OpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographics

OpenEMR has stored XSS in portal_payment.php via Unescaped table_args

Missing Authorization in openemr/openemr

Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1

The Patient Portal of OpenEMR 5.0.2.1 is affected by a incorrect access control system in portal/patient/_machine_config.php

OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration

OpenEMR Missing Authorization in Procedure Order AJAX Deletion Handler

OpenEMR: zhAclCheck Ignores Explicit ACL Denies

OpenEMR has arbitrary image file read via PDF generator

OpenEMR: Inverted ACL Condition in CDR ControllerRouter Allows Any Authenticated User to Modify/Delete Clinical Rules and Plans

OpenEMR's payments gateway_api_key secret rendered into client JS code

OpenEMR's Document and Insurance REST Endpoints Skip ACL

OpenEMR Has Disabled SSL Certificate Verification in HTTP Client

Improper Authorization in openemr/openemr

Improper Access Control in openemr/openemr

Improper Input Validation in openemr/openemr

Improper Access Control in openemr/openemr

Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0

An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to…

In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum password length limit

The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability

OpenEMR has Out-of-Band Server-Side Request Forgery (OOB SSRF)

OpemEMR Vulnerable to Stored XSS Attack in the Additional Address Section of Patient Demographics

OpenEMR Stored XSS via Patient Name Field in Procedure Orders

OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass

OpenEMR has Session Timeout Bypass via skip_timeout_reset

OpenEMR Out-of-Band Server-Side Request Forgery (OOB SSRF) Vulnerability

OpenEMR Has Directory Traversal in Load Code feature

A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server

Improper Input Validation in openemr/openemr

OpenEMR before 5.0.0 Patch 5 allows unauthenticated remote database copying because setup.php exposes functionality for cloning an existing OpenEMR site to an arbitrary…

The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name

OpenEMR Authenticated SQL Injection via backup.php Import Feature

OpenEMR has SQL Injection in PostCalendar Category Delete

A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the…

A SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via…

A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute…

A SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the…

OpenEMR v5.0.1-6 allows code execution

OpenEMR's Portal Payment Endpoint Trusts User-Controlled pid

OpenEMR Missing Authorization Checks in DICOM Viewer State API

OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data

OpenEMR has IDOR in Portal Payment Page that Allows Cross-Patient Record Access

OpenEMR has Authorization Bypass in Dated Reminders Log