system
Describe <CVE-2020-29139>.
user
What is <CVE-2020-29139>?
assistant
A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the searchFields parameter..