CVE-2018-18705

PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LOGIN.php, or the rno parameter to ALIST.php, DUNDEL.php, PDEL.php, or PUNDEL.php.

• CWE-89

• https://packetstormsecurity.com/files/149942/PHPTPoint-Hospital-Management-System-1-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/149942/PHPTPoint-Hospital-Management-System-1-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry

Published

Oct 29, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18699An issue was discovered in GoPro gpmf-parser 1.2.1. There is…
• CVE-2018-18700An issue was discovered in cp-demangle.c in GNU libiberty, a…
• CVE-2018-18701An issue was discovered in cp-demangle.c in GNU libiberty, a…
• CVE-2018-18702spider.admincp.php in iCMS v7.0.11 allows SQL injection via …
• CVE-2018-18703PhpTpoint Mailing Server Using File Handling 1.0 suffers fro…
• CVE-2018-18704PhpTpoint Pharmacy Management System suffers from a SQL inje…
• CVE-2018-18706An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V1…
• CVE-2018-18707An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V1…
• CVE-2018-18708An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V1…
• CVE-2018-18709An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V1…
• CVE-2018-1871IBM Financial Transaction Manager for Digital Payments for M…5.4
• CVE-2018-18710An issue was discovered in the Linux kernel through 4.19. An…