Description
OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers can chain with a file upload to achieve remote code execution. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enabling remote command execution on the vulnerable OpenEMR instance.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
OpenEMR Foundation, Inc. OpenEMR
5.0.2.1affected
References
- https://www.exploit-db.com/exploits/49784 ↗
- https://www.open-emr.org/ ↗
- https://sourceforge.net/projects/openemr/files/OpenEMR%20Current/5.0.2.1/openemr-5.0.2.tar.gz/download ↗
- https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability?utm_medium=cpc&utm_source=twitter&utm_campaign=openemr&utm_term=security&utm_content=tofu ↗
- https://www.youtube.com/watch?v=H8VWNwWgYJo&feature=emb_logo ↗
- https://www.vulncheck.com/advisories/openemr-remote-code-execution ↗