EDB-50037

PoC

OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated)

view exploit source exploit_dbtype webappsauthor Ron Jostpublished 2021-06-21catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-14530UShigh8.8Exploit
An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file (that is readable by the user www-data) fr…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan