PT-2025-47196

Name of the Vulnerable Software and Affected Versions PHPGurukul Complaint Management System version 2.0 Description The software is susceptible to a Cross Site Scripting XSS issue. This flaw is located in the between-date-userreport.php script and affects the fromdate and todate parameters...

CVE-2024-44657

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

CVE-2024-44657

The PHPGurukul Complaint Management System 2.0 is vulnerable to a SQL Injection vulnerability in the between-date-userreport.php file. The root cause is a lack of proper validation and sanitization of externally-entered SQL statements within the fromdate and todate parameters. An attacker can exp...

CVE-2024-44657: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

CVE-2024-46335: Improper Neutralization of Input During Web Page Generation

PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting XSS via the fromdate and todate parameters in between-date-userreport.php...

CVE-2024-46335

PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting XSS via the fromdate and todate parameters in between-date-userreport.php...

PHPGurukul Complaint Management System security vulnerabilities

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the fromdate and todate parameters in between-date-userreport.php. An attacker can...

PHPGurukul Complaint Management System security vulnerabilities

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter fromdate/todate in the file /admin/between-date-complaintreport.php...

CVE-2023-27214

Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php...

CVE-2023-27214: Improper Neutralization of Special Elements used in an SQL Command

Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php...

Student Management System SQL Injection Vulnerability

Student Management System is a simple web-based student management software by Sk.Amir Hamza, an individual developer in Bangladesh. A security vulnerability exists in Online Student Management System v1.0, which originates from multiple SQL injection vulnerabilities via the fromdate and todate...