CVE-2020-23051

CVE-2020-23051 involves Phpgurukul User Registration & User Management System v2.0 with multiple stored cross-site scripting (XSS) vulnerabilities. The flaws are exploitable via the firstname and lastname parameters of the registration form and the loginsystem input fields. The public documents i...

CVE-2020-23051: Improper Neutralization of Input During Web Page Generation

Phpgurukul User Registration & User Management System v2.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & loginsystem input fields...

PT-2021-10827

Name of the Vulnerable Software and Affected Versions Phpgurukul User Registration & User Management System version 2.0 Description The issue concerns multiple stored cross-site scripting XSS vulnerabilities. These vulnerabilities can be exploited via the firstname and lastname parameters of the...

CVE-2021-32630

Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.0.4, there is an authenticated RCE via .phar file upload. A php web shell can be uploaded via the Documents & Files upload feature. Someone with upload permissions could...

CVE-2021-32630

CVE-2021-32630 affects Admidio prior to version 4.0.4, where an authenticated user with upload permissions can exploit the Documents & Files upload feature to achieve remote code execution via a .phar-renamed PHP web shell. The payload can trigger a reverse or bind shell when the uploaded file is...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

CVE-2020-26766

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

CVE-2020-26766: Cross-Site Request Forgery (CSRF)

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

PT-2020-16488

Name of the Vulnerable Software and Affected Versions PHPGurukul User Registration & Login and User Management System With Admin Panel version 2.1 Description A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page. This issue allows an attacker to trick a user into...

User Registration & Login and User Management System 2.1 - Cross Site Request Forgery

Exploit Title: User Registration & Login and User Management System 2.1 - Cross Site Request Forgery Exploit Author: Dipak Panchalth3.d1p4k Vendor Homepage: https://phpgurukul.com Software Link: http://user-registration-login-and-user-management-system-with-admin-panel Version: 5 Tested on Window...

Cross site scripting

Cross Site Scripting XSS vulnerability in the Registration page of the admin panel in PHPGurukul User Registration & Login and User Management System With admin panel 2.1...

CVE-2020-24723

CVE-2020-24723 affects PHPGurukul Admin Panel: User Registration & Login / User Management System with admin panel version 2.1. A cross-site scripting (XSS) vulnerability exists on the Registration page. The connected Red Hat advisory and other sources corroborate an XSS issue in this admin-panel...

Phpgurukul User Registration Login Management System Cross-Site Scripting Vulnerability

Phpgurukul User Registration Login Management System is a website builder for user management by the PHPGurukul team. A cross-site scripting vulnerability exists in PHPGurukul User Registration & Login and User Management System admin panel version 2.1, which stems from a cross-site scripting...

CVE-2020-24723: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in the Registration page of the admin panel in PHPGurukul User Registration & Login and User Management System With admin panel 2.1...

CVE-2020-25952

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

Sql injection

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

CVE-2020-25952

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

CVE-2020-25952

CVE-2020-25952 affects PHPGurukul User Registration & Login and User Management System With admin panel v2.1. Description and connected sources confirm a SQL injection flaw that lets remote attackers execute arbitrary SQL and bypass authentication by exploiting unsafely constructed queries in the...

CVE-2020-25952: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

User Registration And Login And User Management System 2.1 Cross Site Scripting

Exploit Title: User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS Google Dork: N/A Date: 2020-08-07 Exploit Author: yusufmalikul Vendor Homepage: https://phpgurukul.com Software Link:...