CVE-2024-13015: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/search-booking-request.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be...

PHPGurukul Maid Hiring Management System 代码注入漏洞

Maid Hiring Management System is a maid hiring management system. Maid Hiring Management System suffers from a cross-site scripting vulnerability that stems from the lack of adequate validation and filtering of searchdata parameter inputs in the file /admin/search-booking-request.php. No details ...

PHPGurukul Maid Hiring Management System 注入漏洞

Maid Hiring Management System is a maid hiring management system. The Maid Hiring Management System suffers from a SQL injection vulnerability that originates from insufficient validation of the searchdata parameter in file /admin/search-maid.php. An attacker can use this vulnerability to send a...

CVE-2024-48703

PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/search-medicalcard.php via the searchdata parameter...

PT-2024-33185 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PhpGurukul Medical Card Generation System version 1.0 Description: The issue is related to Cross Site Scripting XSS in the /admin/search-medicalcard.php endpoint via the searchdata parameter. This allows for potential malicious script...

CVE-2024-48703: Improper Neutralization of Input During Web Page Generation

PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/search-medicalcard.php via the searchdata parameter...

PT-2024-17495 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Complaint Management System. The issue affects an unknown functionality of the file /admin/complaint-search.php...

CVE-2024-11649

A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated...

CVE-2024-11649: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated...

CVE-2024-51209

Cross-Site Scripting XSS vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to inject arbitrary web script or HTML via the search input field parameter to admin search invoice page and client search invoice page...

CVE-2024-51209

Cross-Site Scripting XSS vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to inject arbitrary web script or HTML via the search input field parameter to admin search invoice page and client search invoice page...

CVE-2024-51209

Anuj Kumar's Client Management System Version 1.2 (also identified as PHPGurukul Client Management System ) is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation, specifically within the search input field parameter . This ...

PT-2024-34561

Name of the Vulnerable Software and Affected Versions Anuj Kumar's Client Management System version 1.2 Description The issue allows local attackers to inject arbitrary web script or HTML via the search input field parameter to admin search invoice page and client search invoice page. This is a...

CVE-2024-11101: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack...

CVE-2024-50989

A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL commands via the "searchdata " parameter...

PHPGurukul Online Marriage Registration System 安全漏洞

PHPGurukul Online Marriage Registration System is a website builder from PHPGurukul that supports online marriage registration. A security vulnerability exists in PHPGurukul Online Marriage Registration System v1.0, which originates from a SQL injection vulnerability in the file...

CVE-2024-10331

A vulnerability, which was classified as critical, has been found in PHPGurukul Vehicle Record System 1.0. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchinputdata leads to sql injection. The attack may be initiated remotel...

PHPGurukul Vehicle Record System SQL注入漏洞

PHPGurukul Vehicle Record System is a vehicle record management system from PHPGurukul. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Vehicle Record System, which originates from an SQL injection vulnerability contained in the searchinputdata parameter of the...

PT-2024-16193 · Unknown · Phpgurukul Vehicle Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Record System version 1.0 Description: A critical issue has been found in the processing of the file /admin/search-vehicle.php. The manipulation of the searchinputdata argument leads to SQL injection. The attack may be...

CVE-2024-10301

A vulnerability, which was classified as critical, was found in PHPGurukul Medical Card Generation System 1.0. Affected is an unknown function of the file /admin/search-medicalcard.php of the component Search. The manipulation of the argument searchdata leads to sql injection. It is possible to...