CVE-2018-17393: SQL Injection
Published Jun 19, 2019
·Updated
SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/patientdetails.php.
Affected Software
1 affected component
Healthnode Hospital Management System Project Healthnode Hospital Management System=1.0
Event History
Jun 19, 2019
CVE Published
via MITRE·04:46 PM
Data Sourced
via MITRE·04:46 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-17393?
CVE-2018-17393 is classified as a medium severity vulnerability due to the potential for SQL injection attacks.
2
How do I fix CVE-2018-17393?
To fix CVE-2018-17393, validate and sanitize all input data to prevent SQL injection vulnerabilities.
3
What specific software version is affected by CVE-2018-17393?
CVE-2018-17393 affects HealthNode Hospital Management System version 1.0.
4
What method is exploited in CVE-2018-17393?
CVE-2018-17393 exploits SQL injection via the id parameter in specific PHP files.
5
What are the potential risks of CVE-2018-17393?
The risks associated with CVE-2018-17393 include unauthorized data access, data loss, and manipulation of database content.