CVE-2026-29187
HIGHOpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.php
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2026-29187. PoCs published by ChrisSub08.
AI-analyzed exploit summary The repository contains a functional SQL injection exploit for CVE-2026-29187 in OpenEMR 7.0.4, demonstrating how user-supplied input in the new search popup functionality is directly concatenated into SQL queries without proper sanitization. The PoC includes curl commands and SQL payloads that trigger the vulnerability.
Description
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a Blind SQL Injection vulnerability exists in the Patient Search functionality (/interface/new/new_search_popup.php). The vulnerability allows an authenticated attacker to execute arbitrary SQL commands by manipulating the HTTP parameter keys rather than the values. Version 8.0.0.3 contains a patch.
Exploits (1)
The repository contains a functional SQL injection exploit for CVE-2026-29187 in OpenEMR 7.0.4, demonstrating how user-supplied input in the new search popup functionality is directly concatenated into SQL queries without proper sanitization. The PoC includes curl commands and SQL payloads that trigger the vulnerability.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N