CVE-2018-15139

Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory.

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

19.04% chance of exploitation in the next 30 days, 97th percentile

Published

2018-08-13

Updated

2024-08-05

Proof-of-concept exploits (5)

• http://packetstormsecurity.com/files/163110/OpenEMR-5.0.1.3-Shell-Upload.html
• http://packetstormsecurity.com/files/163482/OpenEMR-5.0.1.3-Shell-Upload.html
• https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project…
• Hacker5preme/Exploits/tree/main/CVE-2018-15139-Exploit110★ · 2022-02-21
• sec-it/exploit-CVE-2018-151392★ · 2021-07-08

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/50122
• https://www.exploit-db.com/exploits/49998

Security advisories

• openemr/openemr/pull/1757/commits/c2808a0493243f618bbbb3459af23c7da3dc5485
• https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project…

References

• CVE Record
• NVD entry

Related

• CVE-2017-14535
• CVE-2017-14537
• CVE-2017-9380
• CVE-2018-15152
• CVE-2018-19423
• CVE-2018-6383