CVE-2018-17393

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/patientdetails.php.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.exploit-db.com/author/?a=8844Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/46148Exploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/author/?a=8844Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/46148Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jun 19, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-173949.8SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.CVE-2018-173979.8SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.CVE-2018-173989.8SQL Injection exists in the AMGallery 1.2.3 component for Joomla! via the filter_category_id parameter.CVE-2018-173999.8SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter.CVE-2018-17405.4IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site scripting. This vulnerabil CVE-2018-174007.0The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to perform Account Takeover atta CVE-2018-174018.8The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to perform Account Takeover atta CVE-2018-174025.3The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to discover the Credit/Debit car CVE-2018-174038.8The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to impersonate a user and set up CVE-2018-174045.3The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile CVE-2018-174077.8An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the CVE-2018-174087.8Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a