CVE-2013-10044— OpenEMR 安全漏洞

OpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCE

An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Once elevated, the attacker can exploit an unrestricted file upload flaw to achieve remote code execution, resulting in full compromise of the application and its host system.

N/A

SQL命令中使用的特殊元素转义处理不恰当(SQL注入)

OpenEMR 安全漏洞

OpenEMR是OpenEMR社区的一套开源的医疗管理系统。该系统可用于医疗实践管理、电子医疗记录、处方书写和医疗帐单申请。 OpenEMR 4.1.1 Patch 14版本存在安全漏洞，该漏洞源于SQL注入和文件上传缺陷，可能导致远程代码执行。

N/A

N/A