Skip to content

Librehealth Ehr vulnerabilities

librehealth ehrLibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.CVE-2022-314968.8 HighJune 8, 2022
librehealth ehrLibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.CVE-2022-314976.1 MediumJune 8, 2022
librehealth ehrLibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.CVE-2022-314956.1 MediumJune 7, 2022
librehealth ehrLibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.CVE-2022-314946.1 MediumJune 6, 2022
librehealth ehrLibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.CVE-2022-314986.1 MediumJune 6, 2022
librehealth ehrCross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup...CVE-2022-314926.1 MediumJune 6, 2022
librehealth ehrLibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS.CVE-2022-314936.1 MediumJune 6, 2022
librehealth ehrIn LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface...CVE-2022-299388.8 HighMay 5, 2022
librehealth ehrIn LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface...CVE-2022-299395.4 MediumMay 5, 2022
librehealth ehrIn LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in...CVE-2022-299405.4 MediumMay 5, 2022
librehealth ehrinterface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated...CVE-2020-238298.8 HighSeptember 1, 2020
librehealth ehrLibreHealth EMR v2.0.0 is affected by systemic CSRF.CVE-2020-114388.8 HighJuly 15, 2020
librehealth ehrLibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary...CVE-2020-114369.0 CriticalJuly 15, 2020
librehealth ehrLibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to...CVE-2020-114374.3 MediumJuly 15, 2020
librehealth ehrLibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be...CVE-2020-114398.8 HighJuly 15, 2020
librehealth ehrLH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload...CVE-2018-10008398.8 HighDecember 20, 2018
librehealth ehrLibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups...CVE-2018-10006508.8 HighAugust 20, 2018
librehealth ehrLibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter...CVE-2018-10006498.8 HighAugust 20, 2018
librehealth ehrLibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write...CVE-2018-10006488.8 HighAugust 20, 2018
librehealth ehrLibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion...CVE-2018-10006477.1 HighAugust 20, 2018
librehealth ehrLibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write...CVE-2018-10006468.8 HighAugust 20, 2018
librehealth ehrLibreHealthIO lh-ehr version <REL-2.0.0 contains an Authenticated Local File Disclosure...CVE-2018-10006456.5 MediumAugust 20, 2018