NVD

Id
40195  
Name
CVE-2013-4619  
Description
Multiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) start or (2) end parameter to interface/reports/custom_report_range.php, or the (3) form_newid parameter to custom/chart_tracker.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-08-09  
Modified Date
2013-08-13  
Seq
2013-4619  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204544 40195 CVE-2013-4619 http://sourceforge.net/p/openemr/code/ci/8a8a4607ba5ae2b9eb6b6a3b1b8ed7c6ea7e03b1/  View
204545 40195 CVE-2013-4619 http://sourceforge.net/p/openemr/discussion/202506/thread/4854b2b1/#9658  View
204546 40195 CVE-2013-4619 https://www.trustwave.com/spiderlabs/advisories/TWSL2013-018.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22109 JVNDB-2013-003684 OpenEMR における SQL インジェクションの脆弱性 OpenEMR には、SQL インジェクションの脆弱性が存在します。 CVE-2013-4619 64561 CVE-2013-4619 40195 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003684.html 2013-06-10 2013-08-13 View