Lucene search
+L

6736 matches found

Kitploit
Kitploit
added 2026/09/20 2:34 p.m.8 views

CVE-2025-51820

CVE-2025-51820 Se ha descubierto una vulnerabilidad crítica de Ejecución Remota de Código RCE CVE-2025-51820 en Shopping Portal v1.0. 🚨 Ejecución Remota de Código en Online Shopping Portal Project v1.0 CVE-2025-51820 🔍 Introducción En el mundo digital actual, la Ejecución Remota de Código RCE sig...

6.6AI score
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 1:38 p.m.8 views

CVE-2020-25270

CVE-2020-25270 PHPGurukul hostel-management-system 2.1 permite XSS a través de Guardian Name, Guardian Relation, Guardian Contact no, Address, City Proveedor - PHPGurukul Producto -https://phpgurukul.com/hostel-management-system V2.1 Tipo de Vulnerabilidad - Cross Site Scripting XSS Información...

5.4CVSS6.3AI score0.03185EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/20 11:45 a.m.9 views

CVE-2024-39090-PoC

CVE-2024-39090: Script de Exploit PoC Este script PoC explota la CVE-2024-39090, una vulnerabilidad de CSRF a XSS almacenado en PHPGurukul Online Shopping Portal v2.0. Automatiza ataques CSRF para inyectar payloads de JavaScript persistentes, que se ejecutan cuando un usuario privilegiado accede ...

6.1CVSS6AI score0.00503EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 11:44 a.m.8 views

CVE-2024-35511

PHPGurukul Men Salon Management System 2.0 Bienvenido al repositorio de PHPGurukul Men Salon Management System 2.0. Este proyecto tiene como objetivo proporcionar un sistema robusto para la gestión de salones masculinos. Vulnerabilidades de seguridad CVE-2024-35511 Descripción: Vulnerable a...

4.7CVSS5.9AI score0.00389EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/20 9:29 a.m.11 views

CVE-2022-40470

CVE-2022-40470 Cross Site Scripting in Blood Donor Management System Using CodeIgniter - 1.0 Suggested description Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature. Additional Information PoC:...

4.8CVSS6AI score0.00644EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 5:16 a.m.12 views

DWrwq

Descripción PHPGurukul Online Shopping Portal 2.1 es vulnerable a Cross Site Scripting XSS en /admin/updateorder.php. Resumen de la Vulnerabilidad 1.Tipo de Vulnerabilidad: Cross-Site Scripting Almacenado XSS 2.Producto Afectado: Online Shopping Portal Project - 2.1 3.Componente Afectado:...

5.9AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.62 views

Hospital Management System 4.0 - SQL Injection

Hospital Management System 4.0 contains multiple SQL injection vulnerabilities because multiple pages and parameters do not validate user input. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of...

8.8CVSS7.9AI score0.1681EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.67 views

Cyber Cafe Management System 1.0 - SQL Injection

Cyber Cafe Management System 1.0 contains multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of th...

9.8CVSS8.3AI score0.22909EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.56 views

Dairy Farm Shop Management System 1.0 - SQL Injection

Dairy Farm Shop Management System 1.0 contains multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context ...

9.8CVSS8.3AI score0.19253EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.58 views

Diary Management System 1.0 - Cross-Site Scripting

Diary Management System 1.0 contains a cross-site scripting vulnerability via the Name parameter in search-result.php. id: CVE-2022-29004 info: name: Diary Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Diary Management System 1.0 contains a cross-sit...

6.1CVSS6.1AI score0.02944EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.62 views

PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName and ProductPrice parameters in...

9.8CVSS7.1AI score0.15652EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.51 views

PHPGurukul Hospital Management System - Cross-Site Scripting

PHPGurukul Hospital Management System in PHP 4.0 contains multiple cross-site scripting vulnerabilities. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2020-5191 info: name: PHPGurukul Hospital Management System -...

6.1CVSS6.3AI score0.0552EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.74 views

Bank Locker Management System v1.0 - SQL Injection

A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. id: CVE-2023-0562 info:...

9.8CVSS7AI score0.44268EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.52 views

Old Age Home Management System v1.0 - SQL Injection

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter. id: CVE-2023-33338 info: name: Old Age Home Management System v1.0 - SQL Injection author: Harsh severity: critical description: | Old Age Home Management 1.0 is vulnerable to SQL Injection via the username...

9.8CVSS8.2AI score0.03632EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.53 views

Directory Management System 1.0 - SQL Injection

Directory Management System 1.0 contains multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the...

9.8CVSS8.3AI score0.19253EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.58 views

Online Birth Certificate System 1.2 - Stored Cross-Site Scripting

Online Birth Certificate System 1.2 contains multiple stored cross-site scripting vulnerabilities in the component /obcs/user/profile.php, which allows an attacker to execute arbitrary web script or HTML via a crafted payload injected into the fname or lname parameters. id: CVE-2022-29005 info:...

6.1CVSS6.5AI score0.02178EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/20 12:14 a.m.7 views

CVE-2024-9326-PoC

Script PoC del exploit CVE-2024-9326 Este script PoC está diseñado para verificar la presencia de CVE-2024-9326, una vulnerabilidad de inyección SQL de severidad alta en PHPGurukul Online Shopping Portal v2.0. Automatiza el proceso de explotación para determinar si la aplicación web objetivo es...

9.8CVSS7.4AI score0.01444EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 10:15 p.m.11 views

CVE-2024-30998

PHPGurukul Men Salon Management System 2.0 Bienvenido al repositorio de PHPGurukul Men Salon Management System 2.0. Este proyecto tiene como objetivo proporcionar un sistema robusto para la gestión de salones de belleza masculinos. Vulnerabilidades de Seguridad CVE-2024-30998 Descripción:...

9.8CVSS5.9AI score0.01217EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/19 10:01 p.m.10 views

CVE-2022-41445

CVE-2022-41445 Cross Site Scripting en el Sistema de Gestión de Registros de Profesores usando CodeIgnitor Descripción sugerida Una vulnerabilidad de cross-site scripting XSS en el Sistema de Gestión de Registros que usa CodeIgniter 1.0 permite a los atacantes ejecutar scripts web arbitrarios o...

4.8CVSS6AI score0.01044EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 8:54 p.m.9 views

CVE-2025-25965

CVE-2025-25965: Falsificación de Solicitudes entre Sitios CSRF en Online Banquet Booking System v1.2 Introducción La Falsificación de Solicitudes entre Sitios CSRF sigue siendo una de las vulnerabilidades más pasadas por alto y, sin embargo, peligrosas que afectan a las aplicaciones web en la...

6AI score
SaveExploits0
Rows per page
Query Builder