CVE-2018-17179 - An issue was discovered in OpenEMR before 5.0.1 Patch 7

Back Back to CVE browser

CRITICAL

An issue was discovered in OpenEMR before 5.0.1 Patch 7

Published May 17, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 12.78%

Description

An issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the make_task function in /interface/forms/eye_mag/php/taskman_functions.php via /interface/forms/eye_mag/taskman.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://github.com/openemr/openemr/commit/3e22d11c7175c1ebbf3d862545ce6fee18f70617
x_refsource_MISCPatchThird Party Advisory
https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#5.0.1_Patch_.289.2F9.2F18.29
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://github.com/openemr/openemr/commit/3e22d11c7175c1ebbf3d862545ce6fee18f70617		x_refsource_MISCPatchThird Party Advisory
https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#5.0.1_Patch_.289.2F9.2F18.29		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 17, 2019

Updated Aug 5, 2024

Reserved Sep 18, 2018

Link CVE-2018-17179

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-17179

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-17179