Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the index.php user parameter associated with LOGIN.php, or the rno parameter to ALIST.php, DUNDEL.php, PDEL.php, or PUNDEL.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PhpTpoint Hospital Management System SQL注入漏洞
Vulnerability Description
PhpTpoint Hospital Management System是一套使用PHP语言开发的医院管理系统。该系统包括医生管理、患者管理和在线预约等功能。 PhpTpoint Hospital Management System中存在SQL注入漏洞。远程攻击者可通过向index.php文件发送‘user’参数或向ALIST.php、DUNDEL.php、PDEL.php、PUNDEL.php文件发送‘rno’参数利用该漏洞绕过登录页面并以管理员身份进行身份验证，进而获取数据库信息或执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A