Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-15006 State: PUBLISHED Published: 2018-12-28T21:00:00 Last Updated: 2024-08-05T09:46:25.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platform app with a package name of com.android.zte.hiddenmenu (versionCode=23, versionName=6.0.1) that contains an exported broadcast receiver app component named com.android.zte.hiddenmenu.CommandReceiver that is accessible to any app co-located on the device. This app component, when it receives a broadcast intent with a certain action string, will write a non-standard (i.
ice. This app component, when it receives a broadcast intent with a certain action string, will write a non-standard (i.e., not defined in Android Open Source Project (AOSP) code) command to the /cache/recovery/command file to be executed in recovery mode. Once the device boots into recovery mode, it will crash, boot into recovery mode, and crash again. This crash loop will keep repeating, which makes the device unusable. There is no way to boot into an alternate mode once the crash loop starts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106361 - https://www.kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-V
urityfocus.com/bid/106361 - https://www.kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf - https://www.kryptowire.com/portal/android-firmware-defcon-2018/
CVE ID: CVE-2018-15007 State: PUBLISHED Published: 2018-12-28T21:00:00 Last Updated: 2024-08-05T09:46:25.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sky Elite 6.0L+ Android device with a build fingerprint of SKY/x6069_trx_l601_sky/x6069_trx_l601_sky:6.0/MRA58K/1482897127:user/release-keys contains a pre-installed platform app with a package name of com.fw.upgrade.sysoper (versionCode=238, versionName=2.3.8) that contains an exported broadcast receiver app component named com.adups.fota.sysoper.WriteCommandReceiver that allows any app co-located on the device to supply arbitrary commands to be executed as the system user. The com.fw.upgrade.sysoper app cannot be disabl
e device to supply arbitrary commands to be executed as the system user. The com.fw.upgrade.sysoper app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, obtain the user's text messages, and more. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire
user's text messages, and more. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf - https://www.kryptowire.com/portal/android-firmware-defcon-2018/
CVE ID: CVE-2018-15120 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T09:46:25.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45263/ - https://github.com/GNOME/pango/blob/1.42.4/NEWS - https://usn.ubuntu.com/3750-1/ - https://github.com/GNOME/pango/commit/71aaeaf020340412b8d012fe23a556c0420eda5f - https://secur
/usn.ubuntu.com/3750-1/ - https://github.com/GNOME/pango/commit/71aaeaf020340412b8d012fe23a556c0420eda5f - https://security.gentoo.org/glsa/201811-07 - https://mail.gnome.org/archives/distributor-list/2018-August/msg00001.html - http://52.117.224.77/xfce4-pdos.webm - https://www.ign.com/articles/2018/10/16/ps4s-are-reportedly-being-bricked-and-sony-is-working-on-a-fix - https://www.reddit.com/r/PS4/comments/9o5efg/message_bricking_console_megathread/ - https://www.exploit-db.com/exploits/45263 - https://i.redd.it/v7p4n2ptu0s11.jpg
CVE ID: CVE-2018-15121 State: PUBLISHED Published: 2018-08-29T03:00:00 Last Updated: 2024-08-05T09:46:25.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin. Affected packages do not use or validate the state parameter of the OAuth 2.0 and OpenID Connect protocols. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations. Additional Analyst Notes: - CVE Program Container: References: - https://auth0.com/docs/security/bulletins/cve-2018-15121
CVE ID: CVE-2018-15122 State: PUBLISHED Published: 2018-08-16T20:00:00 Last Updated: 2024-08-05T09:46:25.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object (such as DLL or EXE) with an embedded resource file by clicking on the resource. Additional Analyst Notes: - CVE Program Container: References: - https://docs.telerik.com/devtools/justdecompile/knowledge-base/jd-ja-resources-vulnerability - https://www.telerik.com/support/whats-new/justdecompile/release-history/justdecompile-r2-2018-sp1
CVE ID: CVE-2018-15123 State: PUBLISHED Published: 2018-08-13T21:00:00Z Last Updated: 2024-09-16T18:29:02.924Z Vendors: Kaspersky Lab Products: Zipato Zipabox Smart Home Controller Problem Types: Insecure configuration storage Description: Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows remote attacker perform new attack vectors and take under control device and smart home. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/08/klcert-18-003-zipato-zipabox-insecure-configuration-storage/
CVE ID: CVE-2018-15124 State: PUBLISHED Published: 2018-08-13T21:00:00Z Last Updated: 2024-09-16T23:32:11.189Z Vendors: Kaspersky Lab Products: Zipato Zipabox Smart Home Controller Problem Types: Weak hashing algorithm Description: Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/08/klcert-18-004-zipato-zipabox-weak-hash-algorithm/
CVE ID: CVE-2018-15125 State: PUBLISHED Published: 2018-08-13T21:00:00Z Last Updated: 2024-09-17T03:38:11.520Z Vendors: Kaspersky Lab Products: Zipato Zipabox Smart Home Controller Problem Types: Sensitive Information Disclosure Description: Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/08/klcert-18-005-zipato-zipabox-sensitive-information-disclosure/
CVE ID: CVE-2018-15126 State: PUBLISHED Published: 2018-12-19T16:00:00 Last Updated: 2024-08-05T09:46:25.371Z Vendors: n/a Products: LibVNC Problem Types: Heap Use-After-Free Description: LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/01/msg00029.html - https://www.debian.org/security/2019/dsa-4383 - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-027-libvnc-heap-use-after-free/ - https://usn.ubuntu.com/3877-1/
y.com/advisories/klcert-advisories/2018/12/19/klcert-18-027-libvnc-heap-use-after-free/ - https://usn.ubuntu.com/3877-1/ - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
CVE ID: CVE-2018-15127 State: PUBLISHED Published: 2018-12-19T16:00:00 Last Updated: 2024-08-05T09:46:25.625Z Vendors: n/a Products: LibVNC Problem Types: Heap Out-of-Bound write Description: LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4383 - https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-028-libvnc-heap-out-of-bound-write/ - https://usn.ubuntu
kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-028-libvnc-heap-out-of-bound-write/ - https://usn.ubuntu.com/3877-1/ - https://access.redhat.com/errata/RHSA-2019:0059 - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - https://usn.ubuntu.com/4547-1/ - https://usn.ubuntu.com/4587-1/
CVE ID: CVE-2018-15128 State: PUBLISHED Published: 2019-05-13T13:18:22 Last Updated: 2024-08-05T09:46:25.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Polycom Group Series 6.1.6.1 and earlier, HDX 3.1.12 and earlier, and Pano 1.1.1 and earlier. A remote code execution vulnerability exists in the content sharing functionality because of a Buffer Overflow via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://support.polycom.com/content/dam/polycom-support/global/documentation/remote-code-exectuion-vulnerability-group-series.pdf
CVE ID: CVE-2018-15129 State: PUBLISHED Published: 2018-08-07T07:00:00Z Last Updated: 2024-09-17T03:32:25.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThinkSAAS through 2018-07-25 has XSS via the index.php?app=article&ac=comment&ts=do content parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thinksaas/ThinkSAAS/issues/16
CVE ID: CVE-2018-15130 State: PUBLISHED Published: 2018-08-07T14:00:00Z Last Updated: 2024-09-17T03:59:50.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThinkSAAS through 2018-07-25 has XSS via the index.php?app=group&ac=create&ts=do groupdesc parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thinksaas/ThinkSAAS/issues/18
CVE ID: CVE-2018-15131 State: PUBLISHED Published: 2019-05-30T15:22:03 Last Updated: 2024-08-05T09:46:25.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.zimbra.com/show_bug.cgi?id=109012
CVE ID: CVE-2018-15132 State: PUBLISHED Published: 2018-08-07T15:00:00 Last Updated: 2024-08-05T09:46:25.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the open_basedir check. This could be abused to find files on paths outside of the allowed directories. Additional Analyst Notes: - CVE Program Container: References: - http://php.net/ChangeLog-5.php - https://security.netapp.com/advisory/ntap-20181107-0003/ - https://www.tenable.com/security/tns-2018-12 - http://php.net/ChangeLog-7.php
netapp.com/advisory/ntap-20181107-0003/ - https://www.tenable.com/security/tns-2018-12 - http://php.net/ChangeLog-7.php - https://github.com/php/php-src/commit/f151e048ed27f6f4eef729f3310d053ab5da71d4 - https://bugs.php.net/bug.php?id=76459
CVE ID: CVE-2018-15133 State: PUBLISHED Published: 2018-08-09T19:00:00.000Z Last Updated: 2025-10-21T23:45:49.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in gadgetchains/Laravel/RCE/3/chain.php in phpggc. The attacker must know the application key, which normally would never occur, but could happen if the attacker previously had privileged access or successfully accomplished a previous attack. Additional A
uld happen if the attacker previously had privileged access or successfully accomplished a previous attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30 - http://packetstormsecurity.com/files/153641/PHP-Laravel-Framework-Token-Unserialize-Remote-Command-Execution.html
CVE ID: CVE-2018-15136 State: PUBLISHED Published: 2019-01-29T23:00:00 Last Updated: 2024-08-05T09:46:25.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: TitanHQ SpamTitan before 7.01 has Improper input validation. This allows internal attackers to bypass the anti-spam filter to send malicious emails to an entire organization by modifying the URL requests sent to the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.fwhibbit.es/bypassing-spam-titan-my-first-cve
CVE ID: CVE-2018-15137 State: PUBLISHED Published: 2018-08-08T00:00:00 Last Updated: 2024-08-05T09:46:25.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml), which causes remote code execution as well. Because of the WebDAV feature, it is possible to upload arbitrary files by utilizing the PUT method. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/safakaslan/CelaLinkCLRM20/issues/1 - https://www.exploit-db.com/exploits/45021/
CVE ID: CVE-2018-15138 State: PUBLISHED Published: 2018-08-15T17:00:00 Last Updated: 2024-08-05T09:46:25.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45167/
CVE ID: CVE-2018-15139 State: PUBLISHED Published: 2018-08-13T18:00:00 Last Updated: 2024-08-05T09:46:25.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://github.com/openemr/openemr/pull/1757/commits/c2808a0493243f618bbbb3459a
ities-uncovered-by-project-insecurity/ - https://github.com/openemr/openemr/pull/1757/commits/c2808a0493243f618bbbb3459af23c7da3dc5485 - http://packetstormsecurity.com/files/163110/OpenEMR-5.0.1.3-Shell-Upload.html - http://packetstormsecurity.com/files/163482/OpenEMR-5.0.1.3-Shell-Upload.html - https://github.com/Hacker5preme/Exploits/tree/main/CVE-2018-15139-Exploit
CVE ID: CVE-2018-15140 State: PUBLISHED Published: 2018-08-13T18:00:00 Last Updated: 2024-08-05T09:46:25.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get. Additional Analyst Notes: - CVE Program Container: References: - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://www.exploit-db.com/exploits/45202/ - https://github.com/openemr/openemr/pull/1765/files
CVE ID: CVE-2018-15141 State: PUBLISHED Published: 2018-08-13T18:00:00 Last Updated: 2024-08-05T09:46:25.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete. Additional Analyst Notes: - CVE Program Container: References: - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://www.exploit-db.com/exploits/45202/ - https://github.com/openemr/openemr/pull/1765/files
CVE ID: CVE-2018-15142 State: PUBLISHED Published: 2018-08-13T18:00:00 Last Updated: 2024-08-05T09:46:25.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute arbitrary PHP code by writing a file with a PHP extension via the "docid" and "content" parameters and accessing it in the traversed directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://www.exploit-db.com/exploits/45202/ - https://githu
es-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://www.exploit-db.com/exploits/45202/ - https://github.com/openemr/openemr/pull/1765/files
CVE ID: CVE-2018-15143 State: PUBLISHED Published: 2018-08-13T18:00:00 Last Updated: 2024-08-05T09:46:25.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in portal/find_appt_popup_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (1) catid or (2) providerid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://github.com/openemr/openemr/pull/1758/files
CVE ID: CVE-2018-15144 State: PUBLISHED Published: 2018-08-13T18:00:00 Last Updated: 2024-08-05T09:46:25.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in interface/de_identification_forms/find_drug_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the search_term parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://github.com/openemr/openemr/pull/1757/files
CVE ID: CVE-2018-15145 State: PUBLISHED Published: 2018-08-13T18:00:00 Last Updated: 2024-08-05T09:46:25.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in portal/add_edit_event_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (1) eid, (2) userid, or (3) pid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://github.com/openemr/openemr/pull/1758/files
CVE ID: CVE-2018-15146 State: PUBLISHED Published: 2018-08-15T17:00:00 Last Updated: 2024-08-05T09:46:25.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'search_term' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://insecurity.sh/reports/openemr.pdf - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://www.open-emr.org/wiki/index.php/OpenEMR_Patches - https://github.com/open
ies-uncovered-by-project-insecurity/ - https://www.open-emr.org/wiki/index.php/OpenEMR_Patches - https://github.com/openemr/openemr/pull/1757/files
CVE ID: CVE-2018-15147 State: PUBLISHED Published: 2018-08-15T17:00:00 Last Updated: 2024-08-05T09:46:25.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'id' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://insecurity.sh/reports/openemr.pdf - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://www.open-emr.org/wiki/index.php/OpenEMR_Patches - https://github.com/openemr/ope
overed-by-project-insecurity/ - https://www.open-emr.org/wiki/index.php/OpenEMR_Patches - https://github.com/openemr/openemr/pull/1757/files
CVE ID: CVE-2018-15148 State: PUBLISHED Published: 2018-08-15T17:00:00 Last Updated: 2024-08-05T09:46:25.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'text' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://insecurity.sh/reports/openemr.pdf - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://www.open-emr.org/wiki/index.php/OpenEMR_Patches - https://github.com/openemr/openemr/pull/175
ject-insecurity/ - https://www.open-emr.org/wiki/index.php/OpenEMR_Patches - https://github.com/openemr/openemr/pull/1757/files
CVE ID: CVE-2018-15149 State: PUBLISHED Published: 2018-08-15T17:00:00 Last Updated: 2024-08-05T09:46:25.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'encounter' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://insecurity.sh/reports/openemr.pdf - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://www.open-emr.org/wiki/index.php/OpenEMR_Patches - https://github.c
rabilities-uncovered-by-project-insecurity/ - https://www.open-emr.org/wiki/index.php/OpenEMR_Patches - https://github.com/openemr/openemr/pull/1757/files
CVE ID: CVE-2018-15150 State: PUBLISHED Published: 2018-08-15T17:00:00 Last Updated: 2024-08-05T09:46:25.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'temporary_files_dir' variable in interface/super/edit_globals.php. Additional Analyst Notes: - CVE Program Container: References: - https://insecurity.sh/reports/openemr.pdf - https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/ - https://www.open-emr.org/wiki/index.