Skip to content
Fencer Vulns
medium 4.3

CVE-2007-0649 json

Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary progr…

published 2007-02-01 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-0647

cvss
4.3
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
6.4%
EPSS 6.4% chance of exploitation in 30 days, percentile 93%
public exploits
2
Exploit-DB

Summary

Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as conduct (a) remote file inclusion attacks via the srcdir parameter in custom/import_xml.php or (b) cross-site scripting (XSS) attacks via the rootdir parameter in interface/login/login_frame.php, via vectors associated with extract operations on the (1) POST and (2) GET superglobal arrays. NOTE: this issue was originally disputed before the extract behavior was identified in post-disclosure analysis. Also, the original report identified "Open Conference Systems," but this was an error.

Timeline

  1. First public exploit (EDB-29557)
  2. Published

Exploit prediction

6.45% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-29557 OpenEMR 2.8.2 - 'Login_Frame.php' Cross-Site Scripting webapps, 2007-01-31
  • EDB-29556 OpenEMR 2.8.2 - 'Import_XML.php' Remote File Inclusion webapps, 2007-01-31

CVSS scores

assigned by version score vector
NVD 2.0 4.3 AV:N/AC:H/Au:M/C:P/I:P/A:P

Classification

Weakness
  • CWE-94 Improper Control of Generation of Code

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.