Phptpoint

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Phptpoint records in CISA KEV

No Phptpoint vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Pharmacy Management System · all components

TI-2018-13224 CVE-2018-18704 · GHSA-97q9-83c9-gxv5

MEDIUM 45

PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01587 Published 2018-10-27 No fix listed CWE-89

TI-2022-15722 CVE-2022-34954 · GHSA-fv3p-xpjh-cxfp

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoiceprint.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-15721 CVE-2022-34953 · GHSA-874p-6mrf-wfjf

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-15720 CVE-2022-34952 · GHSA-fx9j-374c-w25f

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edituser.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-15719 CVE-2022-34951 · GHSA-6vmc-97pw-jfw7

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89