Librehealth vulnerabilities

Products

• Ehr 22

Newest

• librehealth ehr LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access. CVE-2022-31496 8.8 HighJune 8, 2022
• librehealth ehr LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS. CVE-2022-31497 6.1 MediumJune 8, 2022
• librehealth ehr LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS. CVE-2022-31495 6.1 MediumJune 7, 2022
• librehealth ehr LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS. CVE-2022-31494 6.1 MediumJune 6, 2022
• librehealth ehr LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS. CVE-2022-31498 6.1 MediumJune 6, 2022
• librehealth ehr Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup... CVE-2022-31492 6.1 MediumJune 6, 2022
• librehealth ehr LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS. CVE-2022-31493 6.1 MediumJune 6, 2022
• librehealth ehr In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface... CVE-2022-29938 8.8 HighMay 5, 2022
• librehealth ehr In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface... CVE-2022-29939 5.4 MediumMay 5, 2022
• librehealth ehr In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in... CVE-2022-29940 5.4 MediumMay 5, 2022
• librehealth ehr interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated... CVE-2020-23829 8.8 HighSeptember 1, 2020
• librehealth ehr LibreHealth EMR v2.0.0 is affected by systemic CSRF. CVE-2020-11438 8.8 HighJuly 15, 2020
• librehealth ehr LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary... CVE-2020-11436 9.0 CriticalJuly 15, 2020
• librehealth ehr LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to... CVE-2020-11437 4.3 MediumJuly 15, 2020
• librehealth ehr LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be... CVE-2020-11439 8.8 HighJuly 15, 2020
• librehealth ehr LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload... CVE-2018-1000839 8.8 HighDecember 20, 2018
• librehealth ehr LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups... CVE-2018-1000650 8.8 HighAugust 20, 2018
• librehealth ehr LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter... CVE-2018-1000649 8.8 HighAugust 20, 2018
• librehealth ehr LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write... CVE-2018-1000648 8.8 HighAugust 20, 2018
• librehealth ehr LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion... CVE-2018-1000647 7.1 HighAugust 20, 2018
• librehealth ehr LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write... CVE-2018-1000646 8.8 HighAugust 20, 2018
• librehealth ehr LibreHealthIO lh-ehr version <REL-2.0.0 contains an Authenticated Local File Disclosure... CVE-2018-1000645 6.5 MediumAugust 20, 2018