CVE-2013-10044

This exploit demonstrates SQL injection vulnerabilities in OpenEMR 4.1.1 Patch 14 and an arbitrary file upload vulnerability post-authentication. It includes detailed HTTP requests for exploitation.

This Metasploit module exploits a SQL injection vulnerability in OpenEMR 4.1.1 Patch 14 to retrieve the admin password hash, then uploads a PHP payload for remote code execution.

This Metasploit module exploits a SQL injection vulnerability in OpenEMR 4.1.1 Patch 14 to retrieve the admin password hash, then escalates privileges by uploading a malicious PHP file. It demonstrates a full chain from SQLi to RCE.