CVE-2018-15719

CVE-2018-15719 describes a critical vulnerability in Open Dental versions prior to 18.4, where the installed MySQL database defaults to "root" with a blank password. This misconfiguration allows unauthenticated attackers on the network to gain full access to all database information, leading to complete compromise of confidentiality, integrity, and availability. With a CVSS score of 9.8, this vulnerability is easily exploitable with low attack complexity and no user interaction required. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the default credentials present a severe risk for affected deployments.