CVE-2018-18705: SQL Injection
Published Oct 27, 2018
·Updated
PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LOGIN.php, or the rno parameter to ALIST.php, DUNDEL.php, PDEL.php, or PUNDEL.php.
Affected Software
1 affected component
PhpTpoint hospital management system=1.0
Event History
Oct 27, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-18705?
CVE-2018-18705 is classified as a critical vulnerability due to its potential for severe data exposure via SQL injection.
2
How do I fix CVE-2018-18705?
To fix CVE-2018-18705, sanitize and validate all user inputs to prevent SQL injection attacks.
3
What are the affected software versions for CVE-2018-18705?
CVE-2018-18705 affects PhpTpoint Hospital Management System version 1.0.
4
What types of attacks can CVE-2018-18705 enable?
CVE-2018-18705 can enable attackers to execute arbitrary SQL queries, potentially compromising the database.
5
Is CVE-2018-18705 easy to exploit?
Yes, CVE-2018-18705 is considered easy to exploit due to its reliance on user-supplied input in SQL statements.