Vehicle Record Management System’s add-brand.php component has a cross-site scripting vulnerability

The Vehicle Record Management System is a vehicle record management system developed by PHPGurukul Corporation. The Vehicle Record Management System has a cross-site scripting vulnerability. This vulnerability stems from the brandname parameter in the admin/add-brand.php component, which lacks...

CVE-2024-51225: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the component /admin/add-brand.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the brandname parameter...

CVE-2025-11610

A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2025-11610 SourceCodester Simple Inventory System brand.php sql injection

A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2025-11610: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can be executed remotely. The exploit has been released to the...

PT-2025-41696

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Inventory System version 1.0 Description A security flaw exists due to the manipulation of the editBrandName argument in the processing of the file '/brand.php', leading to a SQL injection. The attack can be executed...

CVE-2025-44181: Improper Neutralization of Input During Web Page Generation

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/add-brand.php via the brandname parameter...

CVE-2025-44180: Improper Neutralization of Input During Web Page Generation

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /edit-brand.php?bid=brandId...

CVE-2025-44181

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/add-brand.php via the brandname parameter...

CVE-2024-10414 PHPGurukul Vehicle Record System edit-brand.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Vehicle Record System 1.0. This affects an unknown part of the file /admin/edit-brand.php. The manipulation of the argument Brand Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

PT-2024-16258

Name of the Vulnerable Software and Affected Versions PHPGurukul Vehicle Record System version 1.0 Description A problematic issue was found in the PHPGurukul Vehicle Record System, affecting an unknown part of the file /admin/edit-brand.php. The manipulation of the Brand Name argument leads to...

CVE-2024-10414: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in PHPGurukul Vehicle Record System 1.0. This affects an unknown part of the file /admin/edit-brand.php. The manipulation of the argument Brand Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2023-1951: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this issue is the function deletebrand of the file /admin/maintenance/brand.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Brand Name parameter...

CVE-2023-24234: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Brand Name parameter...

PT-2023-19491

Name of the Vulnerable Software and Affected Versions Inventory Management System version v1 Description A stored cross-site scripting XSS issue in the php-inventory-management-system/brand.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into...

CVE-2023-24234

A stored cross-site scripting XSS vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Brand Name parameter...

CVE-2022-4234 SourceCodester Canteen Management System brand.php builtin_echo cross site scripting

A vulnerability was found in SourceCodester Canteen Management System. It has been rated as problematic. This issue affects the function builtinecho of the file youthappam/brand.php. The manipulation of the argument brandname leads to cross site scripting. The attack may be initiated remotely. Th...

CVE-2022-4234: Improper Neutralization

A vulnerability was found in SourceCodester Canteen Management System. It has been rated as problematic. This issue affects the function builtinecho of the file youthappam/brand.php. The manipulation of the argument brandname leads to cross site scripting. The attack may be initiated remotely. Th...

Garage Management System brand.php跨站脚本漏洞

Garage Management System is a garage management system that helps you manage all your vehicles, cars and motorcycles. A cross-site scripting vulnerability exists in Garage Management System v1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the brandname...