Open-Emr Openemr vulnerabilities

CVE-2018-9250 [HIGH] CWE-89 CVE-2018-9250: interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execut interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlistname parameter.

CVE-2019-14529 [CRITICAL] CWE-89 CVE-2019-14529: OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php. OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php.

CVE-2020-13568 [HIGH] CWE-89 CVE-2020-13568: SQL injection vulnerability exists in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection vulnerability exists in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability in admin/edit_group.php, when the POST parameter action is “Submit”, the POST parameter parent_id leads to a SQL injection.

CVE-2018-15154 [HIGH] CWE-78 CVE-2018-15154: OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated a OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/billing/sl_eob_search.php after modifying the "print_command" global variable in interface/super/edit_globals.php.

CVE-2018-15155 [HIGH] CWE-78 CVE-2018-15155: OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated a OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/fax_dispatch.php after modifying the "hylafax_enscript" global variable in interface/super/edit_globals.php.

CVE-2018-15156 [HIGH] CWE-78 CVE-2018-15156: OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated a OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/faxq.php after modifying the "hylafax_server" global variable in interface/super/edit_globals.php.

CVE-2026-24898 [CRITICAL] CWE-287 CVE-2026-24898: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0, an unauthenticated token disclosure vulnerability in the MedEx callback endpoint allows any unauthenticated visitor to obtain the practice's MedEx API tokens, leading to complete third-party service compromise, PHI exfiltration,

CVE-2014-5462 [MEDIUM] CWE-89 CVE-2014-5462: Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 (Patch 7) and earlier allow remote authentic Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 (Patch 7) and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) layout_id parameter to interface/super/edit_layout.php; (2) form_patient_id, (3) form_drug_name, or (4) form_lot_number parameter to interface/reports/prescriptions_report.php; (5) payment_id param

CVE-2026-23627 [HIGH] CWE-89 CVE-2026-23627: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an SQL injection vulnerability in the Immunization module allows any authenticated user to execute arbitrary SQL queries, leading to complete database compromise, PHI exfiltration, credential theft, and potential remote code

CVE-2019-3968 [HIGH] CWE-78 CVE-2019-3968: In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host s In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the Scanned Forms interface when creating a new form.

CVE-2018-15143 [CRITICAL] CWE-89 CVE-2018-15143: Multiple SQL injection vulnerabilities in portal/find_appt_popup_user.php in versions of OpenEMR bef Multiple SQL injection vulnerabilities in portal/find_appt_popup_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (1) catid or (2) providerid parameter.

CVE-2018-15145 [CRITICAL] CWE-89 CVE-2018-15145: Multiple SQL injection vulnerabilities in portal/add_edit_event_user.php in versions of OpenEMR befo Multiple SQL injection vulnerabilities in portal/add_edit_event_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (1) eid, (2) userid, or (3) pid parameter.

CVE-2026-25746 [HIGH] CWE-89 CVE-2026-25746: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 contain a SQL injection vulnerability in prescription that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the prescription listing functionality. Version 8.0.0 fi

CVE-2026-32238 [CRITICAL] CWE-78 CVE-2026-32238: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 contain a Command injection vulnerability in the backup functionality that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the backup functionality. Version

CVE-2018-1000019 [HIGH] CWE-78 CVE-2018-1000019: OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can res OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can result in OS command injection by an authenticated attacker with any role. This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher.

CVE-2024-37734 [CRITICAL] CWE-279 CVE-2024-37734: An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid parameter.

CVE-2026-29187 [HIGH] CWE-89 CVE-2026-29187: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a Blind SQL Injection vulnerability exists in the Patient Search functionality (/interface/new/new_search_popup.php). The vulnerability allows an authenticated attacker to execute arbitrary SQL commands by manipulating the

CVE-2020-13567 [CRITICAL] CWE-89 CVE-2020-13567: Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.

CVE-2021-25921 [MEDIUM] CWE-79 CVE-2021-25921: In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to u In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly in the `Allergies` section. An attacker could lure an admin to enter a malicious payload and by that initiate the exploit.

CVE-2024-22611 [CRITICAL] CWE-89 CVE-2024-22611: OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \contr OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controller.php.