EDB-50122
PoCOpenEMR 5.0.1.3 - 'manage_site_files' Remote Code Execution (Authenticated) (2)
view exploit source exploit_dbtype webappsauthor Alexandre ZANNIpublished 2021-07-13catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-15139US | high8.8 | Exploit | ||
Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uplo… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan