Allen Enosh Upputori

2 exploits Active since Sep 2021
CVE-2021-40352 NOMISEC MEDIUM WRITEUP
OpenEMR 6.0.0 - Unauthenticated Insecure Direct Object Reference via pnotes_print.php noteid Parameter
OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users.
3 stars
CVSS 6.5
CVE-2021-40352 EXPLOITDB MEDIUM text WRITEUP
OpenEMR 6.0.0 - Unauthenticated Insecure Direct Object Reference via pnotes_print.php noteid Parameter
OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users.
CVSS 6.5