Security Advisory

CVE-2023-22973

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-22 00:00:00

Last updated 2025-03-12 14:52:47

Assigner mitre

State PUBLISHED

Description

A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0 allows remote authenticated users to execute code via the formname parameter.

← Browse all CVEs View on cve.org ↗