Vulnerabilities > Open EMR > Openemr > 3.0.0

DATE CVE VULNERABILITY TITLE RISK
2017-06-02 CVE-2017-9380 Unrestricted Upload of File with Dangerous Type vulnerability in Open-Emr Openemr
OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application.
network
low complexity
open-emr CWE-434
6.5
6.5
2012-09-09 CVE-2012-2115 SQL Injection vulnerability in Open-Emr Openemr
SQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the u parameter.
network
low complexity
open-emr CWE-89
7.5
7.5