Description
A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the form_code parameter.
Unscored
CVE-2020-29143
EUVD-2020-21524GHSA-p5qq-fg85-2chq
A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to exe…
Published Feb 15, 2021 · Updated Aug 4, 2024 · Assigned by mitre