Phptpoint Pharmacy Management System — known CVE vulnerabilities

Every CVE whose affected-product data names Phptpoint Pharmacy Management System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2018-18704 — CVSS 9.8 (critical): PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter.
• CVE-2022-34951 — CVSS 9.8 (critical): Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php.
• CVE-2022-34952 — CVSS 9.8 (critical): Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edituser.php.
• CVE-2022-34953 — CVSS 9.8 (critical): Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php.
• CVE-2022-34954 — CVSS 9.8 (critical): Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoiceprint.php.