Intrusion Prevention



This indicates an attack attempt to exploit a Directory Traversal Vulnerability in OpenEMR Development Team OpenEMR.
A remote, authenticated attacker could exploit this vulnerability by sending a crafted HTTP request to a vulnerable server. Successful exploitation could result in arbitrary file read or deletion on the target server under the privilege of web server.

Affected Products

OpenEMR Development Team OpenEMR 5.0.1 and earlier


Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.

CVE References