CVE-2013-10044

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-10044
An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Once elevated, the attacker can exploit an unrestricted file upload flaw to achieve remote code execution, resulting in full compromise of the application and its host system.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/openemr/openemr Product
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/openemr_sqli_privesc_upload.rb Exploit
https://www.exploit-db.com/exploits/28329 Exploit
https://www.exploit-db.com/exploits/28408 Exploit
https://www.open-emr.org/ Product
https://www.vulncheck.com/advisories/openemr-sqli-priv-esc-rce Third Party Advisory
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/openemr_sqli_privesc_upload.rb Exploit
https://www.exploit-db.com/exploits/28329 Exploit
https://www.exploit-db.com/exploits/28408 Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*
History

26 Nov 2025, 14:10

Type Values Removed Values Added
CPE cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*
First Time Open-emr
Open-emr openemr
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8
References () https://github.com/openemr/openemr - () https://github.com/openemr/openemr - Product
References () https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/openemr_sqli_privesc_upload.rb - () https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/openemr_sqli_privesc_upload.rb - Exploit
References () https://www.exploit-db.com/exploits/28329 - () https://www.exploit-db.com/exploits/28329 - Exploit
References () https://www.exploit-db.com/exploits/28408 - () https://www.exploit-db.com/exploits/28408 - Exploit
References () https://www.open-emr.org/ - () https://www.open-emr.org/ - Product
References () https://www.vulncheck.com/advisories/openemr-sqli-priv-esc-rce - () https://www.vulncheck.com/advisories/openemr-sqli-priv-esc-rce - Third Party Advisory
Information

Published : 2025-08-01 21:15

Updated : 2025-11-26 14:10

NVD link : CVE-2013-10044

Mitre link : CVE-2013-10044

CVE.ORG link : CVE-2013-10044

JSON object : View

Products Affected

open-emr

  • openemr
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-434

Unrestricted Upload of File with Dangerous Type