Approved changes feed: RSS · Atom
cpe:2.3:a:openemr_foundation:openemr:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Openemr Foundation (7bbb9778-f138-52de-93bb-19d507cd0945) |
|---|---|
| Product | Openemr (c93117aa-bbc6-5598-aef5-d947c60a1652) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-10044 |
vulnerable | 2026-06-08 05:03:51.904412 |
OpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCE
An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Once elevated, the attacker can exploit an unrestricted file upload flaw to achieve remote code execution, resulting in full compromise of the application and its host system.
Published: 2025-08-01T20:46:45.592Z
Updated: 2026-05-15T11:14:12.110Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.