What’s Vulnerable › Vulnerabilities

CVE-2013-10044: OpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCE

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-08-01 · updated 2026-06-16
• Weakness: CWE-89

Description

An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Once elevated, the attacker can exploit an unrestricted file upload flaw to achieve remote code execution, resulting in full compromise of the application and its host system.

Affected products

• openemr: through 4.1.1

References

• https://github.com/openemr/openemr
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/openemr_sqli_privesc_upload.rb
• https://www.exploit-db.com/exploits/28329
• https://www.exploit-db.com/exploits/28408
• https://www.open-emr.org/
• https://www.vulncheck.com/advisories/openemr-sqli-priv-esc-rce
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/openemr_sqli_privesc_upload.rb
• https://www.exploit-db.com/exploits/28329
• https://www.exploit-db.com/exploits/28408

Get alerted when CVE-2013-10044 or the next vulnerability affects your stack