CVE-2013-10044

Description

An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Once elevated, the attacker can exploit an unrestricted file upload flaw to achieve remote code execution, resulting in full compromise of the application and its host system.

PUBLISHED Reserved 2025-07-31 | Published 2025-08-01 | Updated 2025-11-28 | Assigner VulnCheck

Problem types

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-434 Unrestricted Upload of File with Dangerous Type

Product status

Credits

xistence finder

References

raw.githubusercontent.com/.../openemr_sqli_privesc_upload.rb exploit

www.exploit-db.com/exploits/28329 exploit

www.exploit-db.com/exploits/28408 exploit

raw.githubusercontent.com/.../openemr_sqli_privesc_upload.rb exploit

www.exploit-db.com/exploits/28329 exploit

www.exploit-db.com/exploits/28408 exploit

www.open-emr.org/ product

github.com/openemr/openemr product

www.vulncheck.com/advisories/openemr-sqli-priv-esc-rce third-party-advisory

cve.org (CVE-2013-10044)

nvd.nist.gov (CVE-2013-10044)

Download JSON