CyberRota Analysis
AI-GeneratedOpenEMR versions up to 8.2.0 are vulnerable to a critical remote code execution flaw in the document category tree component, allowing authenticated administrators to inject PHP payloads into the categories database. This vulnerability can be exploited to execute arbitrary operating system commands, potentially compromising the web server's integrity. Organizations using OpenEMR should prioritize immediate remediation to mitigate the risk of unauthorized command execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes/Tree.class.php) that allows authenticated administrators to execute arbitrary operating system commands by injecting PHP payloads into the categories database table. Attackers can chain arbitrary SQL execution to alter the id column type to VARCHAR and insert a malicious PHP payload, which is then executed via an unsanitized eval() call whenever any page instantiates CategoryTree, including unauthenticated and low-privilege pages, resulting in command execution as the web server user.
Related CVEs
Other vulnerabilities affecting the same vendor(s)