VulnerabilityModified
CVE-2012-0991
Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a ..
LOW 3.5EPSS 11.3%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.3%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:P/I:N/A:N
- EPSS
- 11.26% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- openemr/openemr
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.htmlExploit, Patch
- http://osvdb.org/78727
- http://osvdb.org/78728
- http://osvdb.org/78729
- http://osvdb.org/78730
- http://secunia.com/advisories/47781Vendor Advisory
- http://www.open-emr.org/wiki/index.php/OpenEMR_PatchesPatch
- http://www.securityfocus.com/bid/51788Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72914
- https://www.htbridge.ch/advisory/HTB23069Exploit, Patch
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.htmlExploit, Patch
- http://osvdb.org/78727
- http://osvdb.org/78728
- http://osvdb.org/78729
- http://osvdb.org/78730
- http://secunia.com/advisories/47781Vendor Advisory
- http://www.open-emr.org/wiki/index.php/OpenEMR_PatchesPatch
- http://www.securityfocus.com/bid/51788Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72914
- https://www.htbridge.ch/advisory/HTB23069Exploit, Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.