medium6.5Public exploit code
CVE-2018-15141
Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actions2018-08-16 · webapps · linux · Verified
Impact
Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Emr | Openemr | before 5.0.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/openemr/openemr/pull/1765/files
- https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
- https://www.exploit-db.com/exploits/45202/
- https://github.com/openemr/openemr/pull/1765/files
- https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
- https://www.exploit-db.com/exploits/45202/