SQL Injection

Every one of the 55 is a mark on the map. Named now: 1 to 26, most at risk first.

1. interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlistname parameter.CVE-2018-9250Open-Emr · 31% likely

   CWE-89

2. OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php.CVE-2019-14529Open-Emr · 28% likely

   CWE-89

3. An issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the make_task function in /interface/forms/eye_mag/php/taskman_functions.php via /interface/form…CVE-2018-17179Open-Emr · 13% likely

   CWE-89

4. An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from all tables of the database via the parame…CVE-2021-41843Open-Emr · 13% likely

   CWE-89

5. OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controller.php.CVE-2024-22611Open-Emr · CVSS 9.8 · 6.3% likely

   CWE-89

6. OpenEMR has SQL Injection VulnerabilityCVE-2026-25746openemr · CVSS 8.8 · 3.5% likely

   CWE-89

7. SQL injection vulnerability in interface/de_identification_forms/find_code_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitr…CVE-2018-15151Open-Emr · 2.4% likely

   CWE-89

8. SQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to exec…CVE-2018-15150Open-Emr · 2.4% likely

   CWE-89

9. SQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker…CVE-2018-15149Open-Emr · 2.4% likely

   CWE-89

10. SQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary S…CVE-2018-15148Open-Emr · 2.4% likely

    CWE-89

11. SQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to exec…CVE-2018-15147Open-Emr · 2.4% likely

    CWE-89

12. SQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execut…CVE-2018-15146Open-Emr · 2.4% likely

    CWE-89

13. Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this v…CVE-2020-13567OpenEMR · CVSS 8.8 · 2.3% likely

    CWE-89

14. OpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCECVE-2013-10044OpenEMR Foundation · CVSS 8.7 · 2.3% likely

    CWE-89

15. Multiple SQL injection vulnerabilities in portal/add_edit_event_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (1…CVE-2018-15145Open-Emr · 2.2% likely

    CWE-89

16. Multiple SQL injection vulnerabilities in portal/find_appt_popup_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (…CVE-2018-15143Open-Emr · 2.2% likely

    CWE-89

17. SQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the u parameter.CVE-2012-2115Open-Emr · 2.1% likely

    CWE-89

18. A SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the…CVE-2020-29142Open-Emr · 2.0% likely

    CWE-89

19. A SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via t…CVE-2020-29140Open-Emr · 2.0% likely

    CWE-89

20. Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 (Patch 7) and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) layout_id parameter to…CVE-2014-5462Open-Emr · 2.0% likely

    CWE-89

21. A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the form…CVE-2020-29143Open-Emr · 1.9% likely

    CWE-89

22. A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbi…CVE-2020-29139Open-Emr · 1.9% likely

    CWE-89

23. SQL injection vulnerability in interface/de_identification_forms/find_drug_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitr…CVE-2018-15144Open-Emr · 1.8% likely

    CWE-89

24. OpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library/clinical_rules.php that affects library/patient.inc.CVE-2019-17197Open-Emr · 1.5% likely

    CWE-89

25. An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/paylib.php and the portalAudit function in /portal/lib/appsq…CVE-2018-17181Open-Emr · 1.4% likely

    CWE-89

26. A SQL injection vulnerability exists (with user privileges) in interface/forms/eye_mag/save.php in OpenEMR 5.0.2.1.CVE-2021-32104Open-Emr · 1.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.