CVE-2021-41843: An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from all tables of the database via the parameter provider_id, a...

Summary

An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from all tables of the database via the parameter provider_id, as demonstrated by the /interface/main/calendar/index.php?module=PostCalendar&func=search URI.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
open-emr	openemr	6.0.0 `cpe:2.3:a:open-emr:openemr:6.0.0:-::::::`

Original advisory text

An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from all tables of the database via the parameter provider_id, a...

An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from all tables of the database via the parameter provider_id, as demonstrated by the /interface/main/calendar/index.php?module=PostCalendar&func=search URI.

References

http://packetstormsecurity.com/files/165301/OpenEMR-6.0.0-6.1.0-dev-SQL-Injectio... Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2021/Dec/38 Exploit Mailing List Third Party Advisory
https://trovent.github.io/security-advisories/TRSA-2109-01/TRSA-2109-01.txt Exploit Third Party Advisory
https://trovent.io/security-advisory-2109-01 Exploit Third Party Advisory