OpenEMR Backup php Command Injection

This strike exploits a command injection vulnerability in OpenEMR. This vulnerability is due to insufficient sanitation for the user-supplied data in the backup.php. A remote authenticated attacker can exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could result in arbitrary command execution in the security context as web server. *NOTE: When running this strike in OneArm mode, the requests will not be sent to /openemr/someuri , instead will be sent to /someuri , since the openemr server docker used, is configured that way.