EDB-49983

PoC

OpenEMR 5.0.0 - Remote Code Execution (Authenticated)

view exploit source exploit_dbtype webappsauthor Ron Jostpublished 2021-06-11catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-9380UShigh8.8Exploit
OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan