CVE-2018-17179: SQL Injection
Published May 17, 2019
·Updated
An issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the maketask function in /interface/forms/eyemag/php/taskmanfunctions.php via /interface/forms/eyemag/taskman.php.
Affected Software
1 affected component
open-emr Openemr<5.0.1.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenEMRto a version that resolves this vulnerability.Fixed in 5.0.1Patch Patch 7
Event History
May 17, 2019
CVE Published
via MITRE·03:57 PM
Data Sourced
via MITRE·03:57 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-17179?
CVE-2018-17179 has a medium severity rating due to the SQL Injection vulnerability that can be exploited.
2
How do I fix CVE-2018-17179?
To fix CVE-2018-17179, update OpenEMR to version 5.0.1 Patch 7 or later.
3
What systems are affected by CVE-2018-17179?
CVE-2018-17179 affects OpenEMR versions prior to 5.0.1 Patch 7.
4
What type of vulnerability is CVE-2018-17179?
CVE-2018-17179 is classified as an SQL Injection vulnerability.
5
Where does CVE-2018-17179 occur in OpenEMR?
CVE-2018-17179 occurs in the make_task function located in /interface/forms/eye_mag/php/taskman_functions.php.