VYPR
← All advisories
High severity8.8OSV Advisory· Published May 18, 2018· Updated Jun 17, 2026

CVE-2018-9250

CVE-2018-9250

Description

interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlistname parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Openemr/OpenemrOSV3 versions
    v2_7_2, v2_7_2-rc1, v2_7_2-rc2, …+ 2 more
    • (no CPE)range: v2_7_2, v2_7_2-rc1, v2_7_2-rc2, …
    • cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*range: <5.0.1.1
    • (no CPE)range: <5.0.1.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.