CVE-2020-29143

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the form_code parameter.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://community.open-emr.org/t/openemr-6-0-0-has-been-released/15732Release Notes, Vendor Advisory
https://murat.one/?p=94Exploit, Third Party Advisory
https://nitroteam.kz/index.php?action=researches&slug=OpenEMR--9035Exploit, Third Party Advisory
https://www.open-emr.org/wiki/index.php/OpenEMR_DownloadsRelease Notes, Vendor Advisory
https://community.open-emr.org/t/openemr-6-0-0-has-been-released/15732Release Notes, Vendor Advisory
https://murat.one/?p=94Exploit, Third Party Advisory
https://nitroteam.kz/index.php?action=researches&slug=OpenEMR--9035Exploit, Third Party Advisory
https://www.open-emr.org/wiki/index.php/OpenEMR_DownloadsRelease Notes, Vendor Advisory

Timeline

Published: Feb 15, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-291445.4In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard CVE-2020-291455.4In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or descr CVE-2020-291466.1A cross site scripting (XSS) vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a c CVE-2020-291477.5A SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows attackers to obtain sensitive database informati CVE-2020-29159.8Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). Supported versions t CVE-2020-291565.3The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter CVE-2020-291577.8An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when the service or system is restarted.CVE-2020-291584.3An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal CVE-2020-291594.9An issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users) can be a privileged Role, if configured by CVE-2020-291607.5An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats audit CVE-2020-291638.8PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.CVE-2020-291646.1PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).