Description
A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the searchFields parameter.
Unscored
CVE-2020-29139
EUVD-2020-21520GHSA-qg7w-94j3-mr4j
A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remot…
Published Feb 15, 2021 · Updated Aug 4, 2024 · Assigned by mitre