| Package | Affected versions | Patched versions |
|---|---|---|
| openemr | ≥ 5.0.1, ≤ 5.0.2 |
Authenticated SQL Injection in interface/forms/eye_mag/js/eye_base.php in OpenEMR through 5.0.2 allows a user to extract arbitrary data from the openemr database via a non-parameterized INSERT INTO statement, as demonstrated by the providerID parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free