CVE-2012-0992

HIGH 8.5CVE-2012-0992 · Published 07/02/2012 · updated 16/06/2026

In short

CVE-2012-0992 is a HIGH (CVSS 8.5) vulnerability affecting openemr (openemr).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openemr openemr	`= 4.1.0`	No fix yet

Description

interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter.

References

archives.neohapsis.com/archives/bugtraq/2012-02/0004.html · Patch
osvdb.org/78731
secunia.com/advisories/47781 · Vendor Advisory
open-emr.org/wiki/index.php/OpenEMR_Patches · Patch
securityfocus.com/bid/51788 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/72915
htbridge.ch/advisory/HTB23069 · Exploit

More vulnerabilities in openemr

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openemr

= 4.1.0

No fix yet

More vulnerabilities in openemr

See all →