CVE-2024-22611: SQL Injection

Published Apr 3, 2025

Updated

OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\CPharmacy.class.php and \openemr\controller.php.

Affected Software

2 affected components

OpenEMR OpenEMR

open-emr Openemr=7.0.2

Event History

Apr 3, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-22611?

CVE-2024-22611 is classified as a high-severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2024-22611?

To fix CVE-2024-22611, update OpenEMR to the latest version that addresses this SQL injection vulnerability.

What components of OpenEMR are affected by CVE-2024-22611?

CVE-2024-22611 affects files in \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php, and \openemr\controller.php.

What types of attacks can CVE-2024-22611 facilitate?

CVE-2024-22611 can facilitate SQL injection attacks, allowing unauthorized access to the database and potential data compromise.

Is CVE-2024-22611 actively being exploited?

As of now, there is no public information indicating active exploitation of CVE-2024-22611, but it is recommended to apply patches promptly.