CVE-2020-19364
OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php.
- Affected products
- Openemr
- Open-emr Openemr
- = 5.0.1
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 70.6% (99th percentile)
- Weakness
- CWE-434
- NVD status
- Modified
- Published
- 2021-01-20
CVE-2020-19364 at NVD
1 known exploit for CVE-2020-19364
Proof-of-concept code and exploit modules indexed by Sploitus