---
id: 4177
title: "Solismed Version 3.3SP1"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/solismed-advisory"
published_at: "2019-12-09T00:00:00Z"
tags: ["rce", "advisory", "healthcare", "file-upload", "solismed", "emr", "cve-2019-15936"]
phying_url: "https://phying.com/item/4177"
lang: en
---

# Solismed Version 3.3SP1

## Summary

Advisory on multiple flaws in Solismed 3.3SP1's EMR — insecure file upload (RCE), LFI, XSS, CSRF, broken access controls and more — enabling full server compromise; fixed in 3.5.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2019-12-09T00:00:00Z
- **Original:** https://bishopfox.com/blog/solismed-advisory
- **Phying News:** https://phying.com/item/4177