Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 22.9%.
PHP
Path Traversal
Openemr
NVD
Exploit-DB
CVSS 2.0
3.5
EPSS
22.9%
Cross-site request forgery (CSRF) vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attackers to hijack the authentication of administrators for requests that modify. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.
CSRF
Dclassifieds
NVD
Exploit-DB
CVSS 2.0
3.5
EPSS
1.5%