high8.8
CVE-2018-9250
interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlistname parameter.
Impact
interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlistname parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Emr | Openemr | before 5.0.1.1 |