| Package | Affected versions | Patched versions |
|---|---|---|
| openemr | = 4.1.1 |
Multiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) start or (2) end parameter to interface/reports/custom_report_range.php, or the (3) form_newid parameter to custom/chart_tracker.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free