Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
•added 2023/12/28 12:00 a.m.•15 views

PT-2023-30926 · Unknown · Student Result Management System

Name of the Vulnerable Software and Affected Versions: Student Result Management System version 1.0 Description: The issue concerns unauthenticated SQL Injection vulnerabilities. Specifically, the rno parameter of the "add results.php" resource does not validate the characters received, and they...

7.9AI score
SaveExploits0References3
OSV
OSV
•added 2018/10/29 12:29 p.m.•20 views

CVE-2018-18705

PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LOGIN.php, or the rno parameter to ALIST.php, DUNDEL.php, PDEL.php, or PUNDEL.php...

9.8CVSS5.8AI score0.01973EPSS
SaveExploits1References1
NVD
NVD
•added 2018/10/29 12:29 p.m.•30 views

CVE-2018-18705

PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LOGIN.php, or the rno parameter to ALIST.php, DUNDEL.php, PDEL.php, or PUNDEL.php...

9.8CVSS10AI score0.01973EPSS
SaveExploits1References1
Prion
Prion
•added 2018/10/29 12:29 p.m.•19 views

Sql injection

PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LOGIN.php, or the rno parameter to ALIST.php, DUNDEL.php, PDEL.php, or PUNDEL.php...

7.5CVSS9.9AI score0.01973EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/10/27 7:00 p.m.•33 views

CVE-2018-18705

PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LOGIN.php, or the rno parameter to ALIST.php, DUNDEL.php, PDEL.php, or PUNDEL.php...

10AI score0.01973EPSS
SaveExploits1References1
CVE
CVE
•added 2018/10/27 7:00 p.m.•61 views

CVE-2018-18705

PhpTpoint Hospital Management System (PHP) contains multiple SQL injection vulnerabilities reachable via index.php (user parameter in LOGIN.php) and via rno parameters to ALIST.php, DUNDEL.php, PDEL.php, or PUNDEL.php. Exploitation could allow bypassing login to obtain database information or exe...

9.8CVSS9.9AI score0.01973EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/27 12:00 a.m.•6 views

CVE-2018-18705: Improper Neutralization of Special Elements used in an SQL Command

PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LOGIN.php, or the rno parameter to ALIST.php, DUNDEL.php, PDEL.php, or PUNDEL.php...

9.8CVSS8.2AI score0.01973EPSS
SaveExploits1References2
Rows per page
Query Builder