Vulnerabilities in Open Dental

3 results

CVE-2018-15718—Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command EPSS 1.4%CVE-2018-15719—Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyoEPSS 1.1%CVE-2018-15717—Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.EPSS 0.5%