CVE-2018-17393

https://notcve.org/view.php?id=CVE-2018-17393

SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/patientdetails.php. Existe inyección SQL en HealthNode Hospital Management System 1.0 mediante los parámetros id en dashboard/Patient/info.php o dashboard/Patient/patientdetails.php. • https://www.exploit-db.com/author/?a=8844 https://www.exploit-db.com/exploits/46148 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •