CVE-2018-15152

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access (1) portal/add_edit_event_user.php, (2) portal/find_appt_popup_user.php, (3) portal/get_allergies.php, (4) portal/get_amendments.php, (5) portal/get_lab_results.php, (6) portal/get_medications.php, (7) portal/get_patient_documents.php, (8) portal/get_problems.php, (9) portal/get_profile.php, (10) portal/portal_payment.php, (11) portal/messaging/messages.php, (12) portal/messaging/secure_chat.php, (13) portal/report/pat_ledger.php, (14) portal/report/portal_custom_report.php, or (15) portal/report/portal_patient_report.php without authenticating as a patient.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/163181/OpenEMR-5.0.1.3-Authentication-Bypass.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/Hacker5preme/Exploits/tree/main/CVE-2018-15152-ExploitExploit, Third Party Advisory
https://github.com/openemr/openemr/pull/1758/filesPatch, Third Party Advisory
https://insecurity.sh/reports/openemr.pdfURL Repurposed
https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/Exploit, Third Party Advisory
https://www.open-emr.org/wiki/index.php/OpenEMR_PatchesPatch, Release Notes, Vendor Advisory
http://packetstormsecurity.com/files/163181/OpenEMR-5.0.1.3-Authentication-Bypass.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/Hacker5preme/Exploits/tree/main/CVE-2018-15152-ExploitExploit, Third Party Advisory
https://github.com/openemr/openemr/pull/1758/filesPatch, Third Party Advisory
https://insecurity.sh/reports/openemr.pdfURL Repurposed
https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/Exploit, Third Party Advisory
https://www.open-emr.org/wiki/index.php/OpenEMR_PatchesPatch, Release Notes, Vendor Advisory

Timeline

Published: Aug 15, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-151538.8OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by CVE-2018-151548.8OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by CVE-2018-151558.8OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by CVE-2018-151568.8OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by CVE-2018-151576.5The libfsclfs_block_read function in libfsclfs_block.c in libfsclfs before 2018-07-25 allows remote attackers to cause a heap-based buffer o CVE-2018-151586.5The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffe CVE-2018-151596.5The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer CVE-2018-151606.5The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows remote attackers to cau CVE-2018-151616.5The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer CVE-2018-151689.8A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /edit CVE-2018-151696.1A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers CVE-2018-15177.5A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service