CVE-2024-22611

critical · 9.8

OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controller.php.

9.8

CVSS

6.3%

EPSS (exploit prob.)

93rd

EPSS percentile

2025-04-03

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
open-emr	openemr	7.0.2

Check a specific version with /api/v1/cve/match.

References

https://github.com/baolqinfosec/CVE-Reseach/blob/main/OpenERM_CVE-2024-22611.md

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-22611