CVE-2019-14529: SQL Injection
Published Aug 2, 2019
·Updated
OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eyemag/save.php.
Affected Software
1 affected component
open-emr Openemr<5.0.2
Event History
Aug 2, 2019
CVE Published
via MITRE·01:46 PM
Data Sourced
via MITRE·01:46 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-14529?
CVE-2019-14529 has been classified with a high severity due to the potential for SQL Injection vulnerabilities.
2
How do I fix CVE-2019-14529?
To fix CVE-2019-14529, upgrade OpenEMR to version 5.0.2 or later to mitigate the SQL Injection vulnerability.
3
What types of attacks can CVE-2019-14529 facilitate?
CVE-2019-14529 can facilitate SQL Injection attacks, allowing attackers to execute arbitrary SQL queries against the database.
4
Can CVE-2019-14529 affect all versions of OpenEMR?
No, CVE-2019-14529 specifically affects OpenEMR versions prior to 5.0.2.
5
Is CVE-2019-14529 a widely exploited vulnerability?
While there are no public reports of widespread exploitation, CVE-2019-14529 remains a serious concern for users of affected versions.