Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
interface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers to bypass authentication and obtain sensitive information via an ignoreAuth=1 value to certain scripts, as demonstrated by (1) interface/fax/fax_dispatch_newpid.php and (2) interface/billing/sl_eob_search.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenEMR 授权问题漏洞
Vulnerability Description
OpenEMR是OpenEMR社区所维护的一套开源的医疗管理系统。该系统可用于医疗实践管理、电子医疗记录、处方书写和医疗帐单申请。 OpenEMR的Web界面中存在安全漏洞。远程攻击者可利用该漏洞绕过身份验证，获取敏感信息。以下版本受到影响：OpenEMR 2.x版本，3.x版本，4.2.0 patch 2之前4.x版本。
CVSS Information
N/A
Vulnerability Type
N/A