open-emr OpenEMR 5.0.2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:open-emr:openemr:5.0.2.1:*:*:*:*:*:*:*part: a version: 5.0.2.1 update: *
| Vendor | Open Emr (4d2478a1-b549-59b7-9c3b-4ea8a9eef12c) |
|---|---|
| Product | Openemr (fd706c85-27bf-51b4-9a1f-14d712ef8e83) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/openemr/openemr |
purl2cpe | 2026-06-01 10:11:40.905503 |
pkg:github/openemr/openemr |
purl2cpe | 2026-06-01 10:11:40.905504 |
pkg:sourceforge/openemr |
purl2cpe | 2026-06-01 10:11:40.905506 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-47817 |
vulnerable | 2026-06-08 05:38:07.734249 |
OpenEMR 5.0.2.1 - Remote Code Execution
MEDIUM (5.4)
OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers can chain with a file upload to achieve remote code execution. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enabling remote command execution on the vulnerable OpenEMR instance.
Published: 2026-01-21T17:27:33.562Z
Updated: 2026-05-25T23:41:14.666Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32104 |
vulnerable | 2026-06-08 05:31:54.694985 |
Details available
A SQL injection vulnerability exists (with user privileges) in interface/forms/eye_mag/save.php in OpenEMR 5.0.2.1.
Published: 2021-05-07T03:50:23.000Z
Updated: 2024-08-03T23:17:29.324Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32102 |
vulnerable | 2026-06-08 05:31:54.692791 |
Details available
A SQL injection vulnerability exists (with user privileges) in library/custom_template/ajax_code.php in OpenEMR 5.0.2.1.
Published: 2021-05-07T03:50:46.000Z
Updated: 2024-08-03T23:17:29.315Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32101 |
vulnerable | 2026-06-08 05:31:54.692343 |
Details available
The Patient Portal of OpenEMR 5.0.2.1 is affected by a incorrect access control system in portal/patient/_machine_config.php. To exploit the vulnerability, an unauthenticated attacker can register an account, bypassing the permission check of this portal's API. Then, the attacker can then manipulate and read data of every registered patient.
Published: 2021-05-07T03:50:56.000Z
Updated: 2024-08-03T23:17:28.950Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36243 |
vulnerable | 2026-06-08 05:25:02.899431 |
Details available
The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php. To exploit the vulnerability, an authenticated attacker can send a POST request that executes arbitrary OS commands via shell metacharacters.
Published: 2021-02-07T19:59:50.000Z
Updated: 2024-08-04T17:23:09.842Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.