Vulnerabilities

TI-2022-15721 CVE-2022-34953 · GHSA-874p-6mrf-wfjf

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-15722 CVE-2022-34954 · GHSA-fv3p-xpjh-cxfp

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoiceprint.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-15720 CVE-2022-34952 · GHSA-fx9j-374c-w25f

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edituser.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-15719 CVE-2022-34951 · GHSA-6vmc-97pw-jfw7

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 44

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2018-13225 CVE-2018-18705 · GHSA-gr84-j8vj-gh65

PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities…

MEDIUM 46

PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LOGIN.php, or the rno parameter to ALIST.php, DUNDEL.php, PDEL.php, or PUNDEL.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01973 Published 2018-10-27 No fix listed CWE-89

TI-2018-13224 CVE-2018-18704 · GHSA-97q9-83c9-gxv5

PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter.

MEDIUM 45

PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01587 Published 2018-10-27 No fix listed CWE-89

TI-2018-13223 CVE-2018-18703 · GHSA-c9gc-7q9m-2crj

PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File…

MEDIUM 40

PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow an attacker to read sensitive files on the system via directory traversal, bypas…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0408 Published 2018-10-27 No fix listed CWE-22

Vulnerabilities

Filters

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability…

PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities…

PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter.

PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File…