High severity8.8OSV Advisory· Published Aug 15, 2018· Updated Jun 17, 2026
CVE-2018-15147
CVE-2018-15147
Description
SQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'id' parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
4- www.open-emr.org/wiki/index.php/OpenEMR_PatchesnvdPatchVendor Advisory
- insecurity.sh/reports/openemr.pdfnvdExploitThird Party Advisory
- github.com/openemr/openemr/pull/1757/filesnvdThird Party Advisory
- www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.