CVE-2018-18703 - CVE House
Back to Database
Status published High CVE-2018-18703

PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple...

Vulnerability Description

PhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read vulnerabilities in different sections that allow an attacker to read sensitive files on the system via directory traversal, bypassing the login page, as demonstrated by the Mailserver_filesystem/home.php coninb, consent, contrsh, condrft, or conspam parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-18703

Credits & Attribution

No credits recorded in the NVD database.

References

More from phptpoint

View All →
CVE-2022-34954
Pharmacy Management System v1.0 was discovered to contain a SQL...
Critical 9.8
CVE-2022-34953
Pharmacy Management System v1.0 was discovered to contain a SQL...
Critical 9.8
CVE-2022-34952
Pharmacy Management System v1.0 was discovered to contain a SQL...
Critical 9.8
CVE-2022-34951
Pharmacy Management System v1.0 was discovered to contain a SQL...
Critical 9.8
CVE-2018-18705
PhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities...
Critical 9.8

Affected Vendor

Affected Software

mailing server using file handling
Vulnerable Versions:
1.0

Timeline

Official Publish: October 27th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.