Security Advisory

CVE-2018-17181

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-05-17 16:00:15
Last updated 2024-08-05 10:39:59
Assigner mitre
State PUBLISHED

Description

An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/paylib.php and the portalAudit function in /portal/lib/appsql.class.php.