E18-0q4i1
CVSS:
8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
False Positive:
f
Variants:
4
Year:
2018
Description
This strike exploits a SQL injection in OpenEMR open-source project.
The vulnerability is due to insufficient user input sanitization passed through the URI, addressing various PHP scripts.
A specially crafted HTTP GET request can cause a SQLi in the context of the database user.
