CVE-2012-0991
NUCLEIOpenEMR 4.1.0 - Authenticated Path Traversal via Formname Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-0991. PoCs published by High-Tech Bridge SA. A Nuclei detection template is also available.
AI-analyzed exploit summary The provided text describes a local file inclusion (LFI) and command injection vulnerability in OpenEMR 4.1.0. It includes a URL example demonstrating the LFI exploit but lacks executable code or detailed technical steps for exploitation.
Description
Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter.
Exploits (3)
The provided text describes a local file inclusion (LFI) and command injection vulnerability in OpenEMR 4.1.0. It includes a URL example demonstrating the LFI exploit but lacks executable code or detailed technical steps for exploitation.
This exploit demonstrates a local file inclusion (LFI) vulnerability in OpenEMR 4.1.0 by manipulating the 'formname' parameter to include arbitrary files (e.g., /etc/passwd). The vulnerability arises from insufficient input sanitization, allowing path traversal attacks.
This exploit demonstrates a local file inclusion (LFI) vulnerability in OpenEMR 4.1.0, allowing an attacker to read arbitrary files (e.g., /etc/passwd) by manipulating the 'formname' parameter. The vulnerability arises from insufficient input sanitization.
Nuclei Templates (1)
http.html:"openemr" || http.title:"openemr" || http.favicon.hash:1971268439
icon_hash=1971268439 || body="openemr" || title="openemr" || app="openemr"