SecuritySpace - CVE-2017-6394

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-6394

Description: Multiple Cross-Site Scripting (XSS) issues were discovered in OpenEMR 5.0.0 and 5.0.1-dev. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to the "openemr- master/gacl/admin/object_search.php" URL (section_value; src_form). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-6394
BugTraq ID: 96539
http://www.securityfocus.com/bid/96539
BugTraq ID: 96576
http://www.securityfocus.com/bid/96576
https://github.com/openemr/openemr/issues/498

CVE ID:	CVE-2017-6394
Description:	Multiple Cross-Site Scripting (XSS) issues were discovered in OpenEMR 5.0.0 and 5.0.1-dev. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to the "openemr- master/gacl/admin/object_search.php" URL (section_value; src_form). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6394 BugTraq ID: 96539 http://www.securityfocus.com/bid/96539 BugTraq ID: 96576 http://www.securityfocus.com/bid/96576 https://github.com/openemr/openemr/issues/498