5 matches found
CVE-2025-44183
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the name, email, and mobile parameters...
CVE-2025-44183
creationtimestamp| type| source ---|---|--- 2025-05-15 15:03:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvho3kw2p 2025-05-15 19:33:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16548...
CVE-2025-44183
The Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross-Site Scripting (XSS) in the /admin/profile.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data provided via the name, email, and mobile parameters. An attacker can exploit th...