CVE-2012-0991

Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .

published February 7, 2012

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09194 · 95.3th percentile
Published
2012-02-07T21:00Z
EPSS history
Timeline
  • 07 FEB 21:00Z
    Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .
    cvelistv5