CVE-2018-17181: SQL Injection
Published May 17, 2019
·Updated
An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/paylib.php and the portalAudit function in /portal/lib/appsql.class.php.
Affected Software
1 affected component
open-emr Openemr<5.0.1.7
Remediation
Event History
May 17, 2019
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-17181?
CVE-2018-17181 is considered a high-severity vulnerability due to its SQL Injection risk.
2
How do I fix CVE-2018-17181?
To fix CVE-2018-17181, upgrade to OpenEMR version 5.0.1 Patch 7 or later.
3
What are the affected versions for CVE-2018-17181?
CVE-2018-17181 affects all OpenEMR versions prior to 5.0.1 Patch 7.
4
What kind of vulnerability is CVE-2018-17181?
CVE-2018-17181 is an SQL Injection vulnerability that allows an attacker to manipulate database queries.
5
Where is CVE-2018-17181 found in the code?
CVE-2018-17181 is found in the SaveAudit function in /portal/lib/paylib.php and the portalAudit function in /portal/lib/appsql.class.php.