Lucene search
+L

281 matches found

CNVD
CNVD
•added 2024/11/07 12:00 a.m.•16 views

Hospital Management System Cross-site Scripting Vulnerability (CNVD-2026-32773)

Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a cross-site scripting vulnerability. This vulnerability stems from the parameter searchdata in the hms/doctor/search.php file, which lacks...

5.1CVSS5.8AI score0.00438EPSS
SaveExploits1
CNNVD
CNNVD
•added 2024/11/02 12:00 a.m.•17 views

PHPGurukul Car Rental Portal 跨站脚本漏洞

Car Rental Portal is a rental car portal. Car Rental Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the /search.php file parameter searchdata, which can be exploited by an attacker to execute arbitrary...

6.1CVSS6AI score0.00455EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/11/02 12:00 a.m.•14 views

PT-2024-16476 · Unknown · Phpgurukul Car Rental Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Rental Portal version 1.0 Description: A vulnerability was found in the processing of the file /search.php, where the manipulation of the searchdata argument leads to cross-site scripting. The attack may be initiated remotely...

6.1CVSS6.6AI score0.00455EPSS
SaveExploits1References10
OSV
OSV
•added 2024/10/29 2:15 p.m.•13 views

CVE-2024-51075

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/user-search.php in PHPGurukul Online DJ Booking Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata parameter...

6.1CVSS6.1AI score0.0046EPSS
SaveExploits1References1
NVD
NVD
•added 2024/10/29 2:15 p.m.•30 views

CVE-2024-51076

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/booking-search.php in PHPGurukul Online DJ Booking Management System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter...

6.1CVSS0.0046EPSS
SaveExploits1References1
CVE
CVE
•added 2024/10/29 12:00 a.m.•80 views

CVE-2024-51076

The CVE-2024-51076 issue affects PHPGurukul Online DJ Booking Management System v1.0. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /odms/admin/booking-search.php endpoint, exploitable via the searchdata parameter to cause arbitrary code execution in the context of a user ses...

6.1CVSS6.7AI score0.0046EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•6 views

CVE-2024-51075: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/user-search.php in PHPGurukul Online DJ Booking Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata parameter...

6.1CVSS6.5AI score0.0046EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/29 12:00 a.m.•42 views

CVE-2024-51075

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/user-search.php in PHPGurukul Online DJ Booking Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata parameter...

0.0046EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/29 12:00 a.m.•38 views

CVE-2024-51076

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/booking-search.php in PHPGurukul Online DJ Booking Management System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter...

0.0046EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/10/29 12:00 a.m.•16 views

PT-2024-34518 · Unknown · Phpgurukul Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online DJ Booking Management System version 1.0 Description: A Reflected Cross Site Scripting XSS issue was found in the "/odms/admin/booking-search.php" API endpoint, allowing remote attackers to execute arbitrary code via the...

6.1CVSS6.8AI score0.0046EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/10/29 12:00 a.m.•18 views

PHPGurukul Online DJ Booking Management System 安全漏洞

PHPGurukul Online DJ Booking Management System is an online DJ booking management system from PHPGurukul. A security vulnerability exists in PHPGurukul Online DJ Booking Management System v1.0, which originates from a reflected cross-site scripting vulnerability in the searchdata parameter of the...

6.1CVSS6.1AI score0.0046EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/23 12:00 a.m.•17 views

PHPGurukul Medical Card Generation System SQL注入漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which stems from the parameter searchdata in the file /admin/search-medicalcard.php that can lea...

7.2CVSS5.8AI score0.0044EPSS
SaveExploits0References4
OSV
OSV
•added 2024/08/12 1:38 p.m.•20 views

CVE-2024-40484

A Reflected Cross Site Scripting XSS vulnerability was found in "/oahms/search.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter...

6.1CVSS6.1AI score0.00663EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/12 12:00 a.m.•16 views

PHPGurukul Old Age Home Management System 安全漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in version v1.0 of the PHPGurukul Old Age Home Management System, which stems from a Reflected Cross-Site Scripting XSS vulnerability in the searchdata parameter of...

6.1CVSS5.7AI score0.00663EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/05/26 12:00 a.m.•17 views

Zoo Management System SQL注入漏洞

Zoo Management System is a zoo management system by the individual developer Carlo Montero. It provides an online and automated platform for zoo organizations to manage their daily records. A SQL injection vulnerability exists in version 2.1 of the PHPGurukul Zoo Management System, which stems fr...

9.8CVSS7AI score0.00419EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/05/26 12:00 a.m.•22 views

Zoo Management System SQL注入漏洞

Zoo Management System is a zoo management system by the individual developer Carlo Montero. It provides an online and automated platform for zoo organizations to manage their daily records. A SQL injection vulnerability exists in version 2.1 of the PHPGurukul Zoo Management System, which stems fr...

9.8CVSS7AI score0.00419EPSS
SaveExploits0References5
OSV
OSV
•added 2024/04/17 7:15 p.m.•19 views

CVE-2024-30990

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter...

9.8CVSS6.1AI score0.00628EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/17 7:15 p.m.•27 views

CVE-2024-30990

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter...

9.8CVSS8.3AI score0.00628EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•5 views

CVE-2024-30990: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter...

9.8CVSS6.4AI score0.00628EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•15 views

Phpgurukul Client Management System SQL注入漏洞

Phpgurukul Client Management System is a client management system from the US-based PHPGurukul Inc. Phpgurukul Client Management System suffers from a SQL injection vulnerability that originates from a SQL injection contained in the Invoices page, which allows an attacker to execute arbitrary cod...

9.8CVSS8.6AI score0.00628EPSS
SaveExploits1References2
Rows per page
Query Builder