Vulnerabilities > Open EMR > Openemr > 5.0.1

DATE CVE VULNERABILITY TITLE RISK
2018-08-13 CVE-2018-15139 Unrestricted Upload of File with Dangerous Type vulnerability in Open-Emr Openemr
Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory.
network
low complexity
open-emr CWE-434
6.5
6.5
2018-05-18 CVE-2018-9250 SQL Injection vulnerability in Open-Emr Openemr
interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlistname parameter.
network
low complexity
open-emr CWE-89
6.5
6.5
2017-11-17 CVE-2017-1000241 Improper Privilege Management vulnerability in Open-Emr Openemr 5.0.1
The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability.
network
low complexity
open-emr CWE-269
6.5
6.5