medium6.5Public exploit code
CVE-2018-15140
Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read ar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actions2018-08-16 · webapps · linux · Verified
Impact
Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Emr | Openemr | before 5.0.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/openemr/openemr/pull/1765/files
- https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
- https://www.exploit-db.com/exploits/45202/
- https://github.com/openemr/openemr/pull/1765/files
- https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
- https://www.exploit-db.com/exploits/45202/