OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data

OpenEMR has IDOR in Portal Payment Page that Allows Cross-Patient Record Access

OpenEMR has Authorization Bypass in Dated Reminders Log

OpenEMR Vulnerable to Path Traversal When Zipping DICOM Folders

OpenEMR: POST /api/.../vital Accepts Attacker-Supplied id and Overwrites Arbitrary Vitals

OpenEMR's Message Update Ignores Patient id

OpenEMR: Therapy Group Sensitivity ACL No Longer Enforced

OpenEMR Vulnerable to Arbitrary File Exfiltration via Fax Endpoint

OpenEMR's Eye Exam View Trusts form_id Without Verifying Patient/Encounter Ownership

OpenEMR's Printable LBF Endpoint Leaks Arbitrary Patient Forms

OpenEMR Patient Picture Context Allows Arbitrary Patient Photo Retrieval

OpenEMR Messages "Show All" Not Restricted to Admins

OpenEMR has SQL Injection in Patient API Sort Parameter

OpenEMR Portal Users Can Forge Provider Signatures

OpenEMR has FHIR Patient Compartment Bypass in CareTeam Resource

OpenEMR has Broken Access Control on Care Coordination Module

OpenEMR has Broken Access Control in Report/Clients/Message List CSV Export

OpenEMR has Broken Access Control that allows unauthorized access to EDI Logs

OpenEMR Arbitrary File Read Vulnerability

OpenEMR may expose Contents of Clinical Notes and Care Planto users who do not have Sensitivities=high privilege

Authorization Bypass Through User-Controlled Key in openemr/openemr

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1

An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from all tables of the database via the…

OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users

In OpenEMR, versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when creating a new user, which leads to a malicious user able to read and send sensitive…

In OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal flaw that allows authenticated attackers to download arbitrary files from the host…

Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via…

Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via…

interface/patient_file/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the newtemplatename and form_body parameters

OpenEMR has IDOR in Patient Notes Web UI allows unauthorized note access/modification

OpenEMR has IDOR in Fee Sheet Product Save

Reflected XSS via Unescaped contextName Parameter in Custom Template Editor

OpenEMR has Open Redirect in Eye Exam Form

OpenEMR allows inconsistent escaping of translation function output

OpenEMR allows Reflected XSS in CAMOS new.php

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1

Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2

Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.0.2

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2

Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting (XSS) - Reflected in openemr/openemr

In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly

An open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3.7, OpenEMR 5.0.2 and OpenEMR development version 6.0.0 (commit…

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7

Reflected XSS exists in interface/forms/eye_mag/view.php in OpenEMR 5.x before 5.0.2.1 ia the id parameter

Reflected XSS in interface/forms/eye_mag/view.php in OpenEMR 5.x before 5.0.2.1 allows a remote attacker to execute arbitrary code in the context of a user's session via the pid…

4.1.0, 4.1.1, 4.1.2, 4.1.2.3, 4.1.2.6, 4.1.2.7, 4.2.0, 4.2.1, 4.2.2, 5.0.0, 5.0.0.5, 5.0.0.6, 5.0.1, 5.0.1.1, 5.0.1.2, 5.0.1.3, 5.0.1.4, 5.0.1.5, 5.0.1.6, 5.0.1.7, 5.0.2, fixed in…