A vulnerability has been discovered in OpenEMR, which can be exploited by malicious users to conduct SQL injection attacks.

Input passed via the "u" GET parameter to interface/login/validateUser.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Successful exploitation requires that "magic_quotes_gpc" is disabled.

The vulnerability is confirmed in version 4.1.0. Other versions may also be affected.

Solution
Apply patch 4-1-0-Patch-5.

Provided and/or discovered by
Independently discovered by Level and Mavituna Security

Changelog
Further details available to Secunia VIM customers

Original Advisory
Level:
http://www.exploit-db.com/exploits/18274/

NS-12-001:
http://www.mavitunasecurity.com/sql-injection-vulnerability-in-openemr/

OpenEMR:
http://www.open-emr.org/wiki/index.php/OpenEMR_Patches

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers