EDB-35518

functional

OpenEMR 4.1.2(7) - Multiple SQL Injections

view exploit source exploit_dbverifiedtype webappsauthor Portcullispublished 2014-12-10catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2014-5462USmedium6.5Exploit
Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 (Patch 7) and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) layout_id parameter to…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan