CVE-2022-38813: Exposure of Resource to Wrong Sphere

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...

PT-2022-24580

Name of the Vulnerable Software and Affected Versions PHPGurukul Blood Donor Management System version 1.0 Description The issue allows attackers to access all user data, delete users, add and manage Blood Group, and submit reports due to improper access restrictions to the "admin/dashboard.php"...

CVE-2022-41446: Undefined Security Weakness

An access control issue in /Admin/dashboard.php of Record Management System using CodeIgniter v1.0 allows attackers to access and modify user data...

CVE-2022-41446

CVE-2022-41446 is an access control vulnerability in Record Management System using CodeIgniter v1.0. The issue resides in /Admin/dashboard.php, enabling attackers to access and modify user data due to improper access control. Affects CodeIgniter-based Teachers/Record Management System v1.0; CVSS...

CVE-2020-35745: Missing Authorization

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs...

PT-2019-17966

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0 Description The issue allows remote attackers to bypass intended access restrictions. This can be achieved by directly navigating to "admin/dashboard.php" or "admin/user.php",...

CVE-2019-6126: Direct Request

The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff...