CVE-2021-32102: SQL Injection
Published May 7, 2021
·Updated
A SQL injection vulnerability exists (with user privileges) in library/customtemplate/ajaxcode.php in OpenEMR 5.0.2.1.
Affected Software
1 affected component
open-emr Openemr=5.0.2.1
Remediation
Event History
May 7, 2021
CVE Published
via MITRE·03:50 AM
Data Sourced
via MITRE·03:50 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this SQL injection vulnerability?
The vulnerability ID for this SQL injection vulnerability is CVE-2021-32102.
2
Where does the SQL injection vulnerability exist in OpenEMR?
The SQL injection vulnerability exists in library/custom_template/ajax_code.php in OpenEMR 5.0.2.1.
3
What is the severity of CVE-2021-32102?
The severity of CVE-2021-32102 is high with a severity value of 8.8.
4
How can I fix the SQL injection vulnerability in OpenEMR 5.0.2.1?
To fix the SQL injection vulnerability in OpenEMR 5.0.2.1, you should update to a patched version of OpenEMR (e.g., OpenEMR 5.0.2 patch 5).
5
What is the CWE ID for this SQL injection vulnerability?
The CWE ID for this SQL injection vulnerability is CWE-89.