OS Command Injection Vulnerability in OpenEMR 5.0.0's fax_dispatch.php

CVE-2018-1000019 · HIGH Severity

AV:N/AC:L/AU:S/C:C/I:C/A:C

OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can result in OS command injection by an authenticated attacker with any role. This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher.

Learn more about our Web Application Penetration Testing UK.