Join us at the legendary Security Wasteland party at Black Hat on August 6th
Register
Products
Government
Resources
Community
Company
Partners
Sign In / Join
Sign In
Advisories
OpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCE
Go Back
severity
high
date
August 1, 2025
Affecting
OpenEMR ≤ 4.1.1 Patch 14
CVE
CVE-2013-10044
CVE type
SQL Injection, Unrestricted File Upload
CVSS
8.7
CVSS V4 Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
Metasploit Module
EDB-28329
EDB-28408 (Metasploit)
Product Site
GitHub Repo
Credit
xistence