Lucene search
+L

163 matches found

OSV
OSV
added 2024/11/05 1:15 a.m.9 views

CVE-2024-10806

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to cross site scripting. The attack can be...

4.8CVSS3.8AI score0.00413EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/04 12:00 a.m.15 views

PT-2024-16564 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: A vulnerability was found in the PHPGurukul Hospital Management System, affecting the file betweendates-detailsreports.php. The manipulation of the fromdate and todate arguments...

5.1CVSS4.1AI score0.00413EPSS
SaveExploits1References15
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.21 views

PHPGurukul Medical Card Generation System SQL注入漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which stems from the parameter fromdate/todate in the file...

7.2CVSS7.9AI score0.00425EPSS
SaveExploits0References4
CNVD
CNVD
added 2024/09/18 12:00 a.m.6 views

Bus Pass Management System pass-bwdates-reports-details.php file cross-site scripting vulnerability

Bus Pass Management System is a bus pass management system. Bus Pass Management System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the fromdate and todate parameters in the...

6.3CVSS6.5AI score0.00328EPSS
SaveExploits1References1
OSV
OSV
added 2024/09/13 4:15 p.m.6 views

CVE-2024-44798

phpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting XSS in /admin/pass-bwdates-reports-details.php via fromdate and todate parameters...

4.8CVSS5.8AI score0.00328EPSS
SaveExploits1References1
NVD
NVD
added 2024/09/13 4:15 p.m.25 views

CVE-2024-44798

phpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting XSS in /admin/pass-bwdates-reports-details.php via fromdate and todate parameters...

6.3CVSS0.00328EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/09/13 12:00 a.m.27 views

CVE-2024-44798

phpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting XSS in /admin/pass-bwdates-reports-details.php via fromdate and todate parameters...

0.00328EPSS
SaveExploits1References1
CVE
CVE
added 2024/09/13 12:00 a.m.67 views

CVE-2024-44798

The CVE-2024-44798 entry concerns phpgurukul Bus Pass Management System 1.0, which is vulnerable to a Cross-site Scripting (XSS) flaw in the admin/pass-bwdates-reports-details.php page via the fromdate and todate parameters. Multiple connected records corroborate the issue across sources (NVD, Re...

6.3CVSS6AI score0.00328EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/09/13 12:00 a.m.8 views

PHPGurukul Bus Pass Management System 安全漏洞

Bus Pass Management System is a bus pass management system. Bus Pass Management System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the fromdate and todate parameters in the...

6.3CVSS6.4AI score0.00328EPSS
SaveExploits1References2
OSV
OSV
added 2024/04/27 10:15 p.m.9 views

CVE-2024-4293

A vulnerability classified as problematic was found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file appointment-bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to cross site scriptin...

5.4CVSS3.8AI score0.00635EPSS
SaveExploits3References4
CNNVD
CNNVD
added 2024/04/27 12:00 a.m.9 views

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a doctor appointment management system by the individual developer ANUJ KUMAR. A cross-site scripting vulnerability exists in Doctor Appointment Management System version 1.0, which stems from the parameter fromdate/todate in the file...

5.4CVSS6AI score0.00635EPSS
SaveExploits3References6
Vulnrichment
Vulnrichment
added 2024/04/17 12:00 a.m.14 views

CVE-2024-30985

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...

8.7AI score0.00695EPSS
SaveExploits1References1
OSV
OSV
added 2023/03/09 9:15 p.m.9 views

CVE-2023-27214

Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php...

9.8CVSS7.3AI score0.00788EPSS
SaveExploits1References2
Prion
Prion
added 2023/03/09 9:15 p.m.18 views

Sql injection

Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php...

7.5CVSS9.9AI score0.00788EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/03/09 12:00 a.m.33 views

CVE-2023-27214

Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php...

10AI score0.00788EPSS
SaveExploits1References2
NVD
NVD
added 2022/05/05 5:15 p.m.35 views

CVE-2022-28080

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...

8.8CVSS0.56907EPSS
SaveExploits3References4
OSV
OSV
added 2022/05/05 5:15 p.m.11 views

CVE-2022-28080

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...

8.8CVSS7.3AI score0.56907EPSS
SaveExploits3References4
ATTACKERKB
ATTACKERKB
added 2022/05/05 5:15 p.m.4 views

CVE-2022-28080

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...

8.8CVSS6AI score0.56907EPSS
SaveExploits3References6
Prion
Prion
added 2022/05/05 5:15 p.m.21 views

Sql injection

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...

6.5CVSS9AI score0.56907EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
added 2022/05/05 4:06 p.m.43 views

CVE-2022-28080

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...

9.2AI score0.56907EPSS
SaveExploits3References4
Rows per page
Query Builder