CVE-2012-0992
HIGH 8.5EPSS 3.7%
interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter.
- CVSS v2.0 NVD
- 8.5 HIGH
AV:N/AC:M/Au:S/C:C/I:C/A:C - EPSS
- 3.66% chance of exploitation in the next 30 days, 90th percentile
- Published
- 2012-02-07
- Updated
- 2024-08-06
ExploitDB entries (1)
Security advisories
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.html
- http://secunia.com/advisories/47781
- http://www.open-emr.org/wiki/index.php/OpenEMR_Patches
- http://www.securityfocus.com/bid/51788