high8.8Public exploit code
CVE-2017-9380
OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenEMR 5.0.0 - Remote Code Execution (Authenticated)2021-06-11 · webapps · php
Impact
OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Emr | Openemr | through 5.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/163087/OpenEMR-5.0.0-Remote-Shell-Upload.html
- https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-9380-Exploit
- https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-002
- http://packetstormsecurity.com/files/163087/OpenEMR-5.0.0-Remote-Shell-Upload.html
- https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-9380-Exploit
- https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-002