CVE-2012-0992 | BDVDB-2026-49045 Detail
Description#
interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://www.htbridge.ch/advisory/HTB23069
- http://osvdb.org/78731
- http://www.securityfocus.com/bid/51788
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.html
- http://secunia.com/advisories/47781
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72915
- http://www.open-emr.org/wiki/index.php/OpenEMR_Patches
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.