Researchers
Back
Will Porter
Researcher from
Lodestone Security
#14985
of 60,565
21
Total CVSS
Vulnerabilities
·
3
Medium
2
High
1
PT-2020-13369
2020-10-02
6.1
CVE-2020-13168
Sysaid
Sysaid
The issue allows for reflected XSS via the `accountid` parameter in the "ForgotPassword.jsp" page.
PT-2019-14661
2019-10-21
8.8
CVE-2019-16404
Openemr
Openemr
The issue allows a user to extract arbitrary data from the database via a non-parameterized INSERT INTO statement. This can be achieved by exploiting the `providerID` parameter in the `interface/forms/eye mag/js/eye base.php` file.
PT-2019-15139
2019-10-21
6.1
CVE-2019-17409
Openemr
Openemr
A reflected XSS issue exists in the interface/forms/eye mag/view.php file, specifically affecting the `id` parameter.