Security Advisory

CVE-2018-9250

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-05-18 14:00:00
Last updated 2024-08-05 07:17:52
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlistname parameter.