CVE-2024-30985

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...

CVE-2024-30985

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...

CVE-2024-30989

Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parameter...

CVE-2024-30990

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter...

CVE-2024-30990

CVE-2024-30990 describes a SQL injection in the Invoices page of the phpgurukul Client Management System (PHP & MySQL, v1.1). The vulnerability allows an attacker to execute arbitrary SQL commands through the searchdata parameter. The Red Hat and CNNVD entries corroborate the same issue, with the...

PT-2024-23712 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Client Management System version 1.1 Description: The issue allows an attacker to execute arbitrary SQL commands via the searchdata parameter in the "Invoices" page. This enables the attacker to manipulate the database, potentially...

PT-2024-23709 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Client Management System version 1.1 Description: The issue allows attackers to execute arbitrary code and obtain sensitive information via the "Search bar" in the /search-invoices.php endpoint. This is a Cross Site Scripting...

PHPGurukul Client Management System 安全漏洞

PHPGurukul Client Management System is a client management system from the U.S.-based PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Client Management System version 1.1, which originates from the presence of cross-site scripting that allows an attacker to execute arbitrary code a...

PHPGurukul Client Management System 安全漏洞

PHPGurukul Client Management System is a client management system from the US-based PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Client Management System version 1.1, which originates from the presence of cross-site scripting that allows an attacker to execute arbitrary code...

CVE-2024-30986

CVE-2024-30986 affects the PHPGurukul Client Management System v1.1. A Cross Site Scripting vulnerability exists in /edit-services-details.php, exploitable via the price and sname parameters. The issue arises from insufficient input sanitization, enabling attackers to inject and execute arbitrary...

PT-2024-23708 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Client Management System version 1.1 Description: The issue allows attackers to execute arbitrary code and obtain sensitive information. This is achieved via the fromdate and todate parameters in the "/bwdates-reports-ds.php" API...

PT-2024-23710 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Client Management System using PHP & MySQL version 1.1 Description: The issue allows attackers to execute arbitrary code via the cname, comname, state, and city parameters in the "/edit-client-details.php" endpoint. This enables...

CVE-2024-30986

Cross Site Scripting vulnerability in /edit-services-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and via "price" and "sname" parameter...

CVE-2024-30986

Cross Site Scripting vulnerability in /edit-services-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and via "price" and "sname" parameter...

CVE-2024-30987

Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and todate parameters...

CVE-2024-30985

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...

CVE-2024-30988

Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the Search bar...

Client Management System 跨站脚本漏洞

PHPGurukul Client Management System is a client management system from the US-based PHPGurukul, Inc. Phpgurukul Client Management System suffers from a cross-site scripting vulnerability that originates from cross-site scripting contained in search-invoices.php, which allows an attacker to execut...

PT-2024-23706 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Client Management System version 1.1 Description: The issue allows an attacker to execute arbitrary SQL commands via the todate and fromdate parameters in the "B/W Dates Reports" page. This is a SQL Injection vulnerability, which c...

PHPGurukul Client Management System 安全漏洞

PHPGurukul Client Management System is a client management system from PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Client Management System version 1.1, which originates from a vulnerability that allows attackers to conduct SQL injection attacks...