OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php.

Published Jan 20, 2021 · Updated Aug 4, 2024 · Assigned by mitre