Lucene search
+L

154 matches found

CNNVD
CNNVD
•added 2025/11/14 12:00 a.m.•21 views

PHPGurukul Student Record System 安全漏洞

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the adminname and aemailid parameters of admin-profile.php. An attacker can exploit this vulnerability t...

6.5CVSS8.1AI score0.00197EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/14 12:00 a.m.•26 views

CVE-2024-44636

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php...

0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/14 12:00 a.m.•12 views

CVE-2024-44636

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php...

5.8AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/14 12:00 a.m.•35 views

CVE-2024-44635

PHPGurukul Student Record System version 3.20 is vulnerable to a Cross-Site Scripting (XSS) flaw within the /admin-profile.php file. The root cause is the lack of effective filtering and escaping of user-supplied data provided via the adminname and aemailid parameters. An attacker could exploit t...

6.1CVSS5.8AI score0.00225EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•8 views

CVE-2024-44635: Improper Neutralization of Input During Web Page Generation

PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting XSS via adminname and aemailid parameters in /admin-profile.php...

6.1CVSS5.8AI score0.00225EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•5 views

CVE-2024-44636: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php...

6.5CVSS5.8AI score0.00197EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/10/31 12:00 a.m.•9 views

Curfew e-Pass Management System admin-profile.php file cross-site scripting vulnerability

Curfew e-Pass Management System is an electronic pass management system. Curfew e-Pass Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter adminname or email in the file...

4.8CVSS6.2AI score0.00262EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 6:52 p.m.•30 views

CVE-2025-12303

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing a manipulation of the argument adminname/email can lead to cross site scripting. The attack may be launched remotely. The exploit has been...

4.8CVSS3AI score0.00262EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/27 6:02 p.m.•15 views

EUVD-2025-36230

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing manipulation of the argument adminname/email can lead to cross site scripting. The attack may be launched remotely. The exploit has been...

4.8CVSS5AI score0.00262EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2025/10/27 6:02 p.m.•12 views

CVE-2025-12303

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing a manipulation of the argument adminname/email can lead to cross site scripting. The attack may be launched remotely. The exploit has been...

4.8CVSS3.6AI score0.00262EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•21 views

PT-2025-44003

Name of the Vulnerable Software and Affected Versions PHPGurukul Curfew e-Pass Management System version 1.0 Description A flaw exists in PHPGurukul Curfew e-Pass Management System version 1.0. Manipulation of the adminname/email argument within an unknown function of the admin-profile.php file c...

4.8CVSS2.8AI score0.00262EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•5 views

CVE-2025-12303: Improper Neutralization of Input During Web Page Generation

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing a manipulation of the argument adminname/email can lead to cross site scripting. The attack may be launched remotely. The exploit has been...

4.8CVSS3.6AI score0.00262EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-12725

Malicious code in bioql PyPI...

4.8CVSS6.6AI score0.00315EPSS
SaveExploits1References2
CNVD
CNVD
•added 2025/07/23 12:00 a.m.•20 views

Online Banquet Booking System Cross-Site Scripting Vulnerability

Online Banquet Booking System is an online banquet booking system. A cross-site scripting vulnerability exists in Online Banquet Booking System, which originates from the failure to strictly filter the adminname parameter in the /admin/admin-profile.php file. An attacker can exploit this...

5.4CVSS6.3AI score0.00357EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/07/23 12:00 a.m.•17 views

Time Table Generator System Cross-Site Scripting Vulnerability

Time Table Generator System is a time table generator system. A cross-site scripting vulnerability exists in Time Table Generator System, which stems from the adminname parameter in the /admin/profile.php file not effectively filtering user input. No details of the vulnerability are available at...

5.4CVSS6.3AI score0.0028EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/21 10:15 p.m.•18 views

CVE-2025-7941

A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...

5.4CVSS3.8AI score0.0028EPSS
SaveExploits1References6
OSV
OSV
•added 2025/07/21 10:15 p.m.•21 views

CVE-2025-7942

A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack can be...

5.4CVSS3.7AI score0.00272EPSS
SaveExploits1References5
OSV
OSV
•added 2025/07/21 11:15 a.m.•20 views

CVE-2025-7924

A vulnerability classified as problematic was found in PHPGurukul Online Banquet Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack can be launche...

5.4CVSS3.7AI score0.00357EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/07/21 12:00 a.m.•25 views

PT-2025-30350 · Unknown · Phpgurukul Time Table Generator System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Time Table Generator System version 1.0 PHPGurukul Taxi Stand Management System version 1.0 Description: A problematic vulnerability exists due to cross site scripting. Manipulation of the adminname argument in the /admin/profile.p...

5.4CVSS4AI score0.0028EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/07/21 12:00 a.m.•18 views

PHPGurukul Online Banquet Booking System 安全漏洞

Online Banquet Booking System is an online banquet booking system. A cross-site scripting vulnerability exists in Online Banquet Booking System, which originates from the failure to strictly filter the adminname parameter in the /admin/admin-profile.php file. An attacker can exploit this...

5.4CVSS4.5AI score0.00357EPSS
SaveExploits1References6
Rows per page
Query Builder