Exploitation Summary
EIP tracks 3 public exploits for CVE-2013-10044.
PoCs published by xistence, including Metasploit module exploits/unix/webapp/openemr_sqli_privesc_upload.
AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in OpenEMR 4.1.1 Patch 14 and an arbitrary file upload vulnerability post-authentication. It includes detailed HTTP requests for exploitation.
Description
An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Once elevated, the attacker can exploit an unrestricted file upload flaw to achieve remote code execution, resulting in full compromise of the application and its host system.
Exploits (3)
This exploit demonstrates SQL injection vulnerabilities in OpenEMR 4.1.1 Patch 14 and an arbitrary file upload vulnerability post-authentication. It includes detailed HTTP requests for exploitation.
This Metasploit module exploits a SQL injection vulnerability in OpenEMR 4.1.1 Patch 14 to retrieve the admin password hash, then uploads a PHP payload for remote code execution.
This Metasploit module exploits a SQL injection vulnerability in OpenEMR 4.1.1 Patch 14 to retrieve the admin password hash, then escalates privileges by uploading a malicious PHP file. It demonstrates a full chain from SQLi to RCE.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H