high8.8
CVE-2020-19364
OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php.
Impact
OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Emr | Openemr | Version 5.0.1 |