Aller au contenu
en Se connecter
Non notée

CVE-2019-3964 In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc_id parameter

Description

In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc_id parameter. This could allow an attacker to execute arbitrary code in the context of a user's session.

Produits et versions touchés

Produit Versions touchées Corrigé en
OpenEMR Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de OpenEMR

Les 14 CVE de OpenEMR →
CVE-2021-25923 In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum… Non notée CVE-2021-25922 In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being… Non notée CVE-2021-25917 In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being… 4.8 Moyenne CVE-2021-25918 In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being… 4.8 Moyenne
Suivre cette CVE