| Package | Affected versions | Patched versions |
|---|---|---|
| openemr | < 5.0.1.4 | 5.0.1.4 |
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/billing/sl_eob_search.php after modifying the "print_command" global variable in interface/super/edit_globals.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free