sec-it/exploit-CVE-2018-15139

PoC

OpenEMR < 5.0.1.4 - (Authenticated) File upload - Remote command execution

view exploit source poc_in_githubauthor sec-itpublished 2021-07-05catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-15139UShigh8.8Exploit
Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uplo…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan