High severity8.8NVD Advisory· Published Jun 2, 2017· Updated Jun 17, 2026

CVE-2017-9380

Description

OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Openemr/Openemr
cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*
Range: <=5.0.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/163087/OpenEMR-5.0.0-Remote-Shell-Upload.htmlnvdExploitThird Party AdvisoryVDB Entry
github.com/Hacker5preme/Exploits/tree/main/CVE-2017-9380-ExploitnvdExploitThird Party Advisory
www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-002nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.012
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000