PT-2023-12488 · WordPress · Doneren Met Mollie

Name of the Vulnerable Software and Affected Versions: Doneren met Mollie plugin for WordPress versions up to and including 2.8.5 Description: The issue concerns Sensitive Data Exposure due to missing capability checks in the dmm export donations function, which is called via the admin post dmm...

CVE-2022-38813

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...

Design/Logic Flaw

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...

CVE-2022-38813

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...

CVE-2022-38813: Exposure of Resource to Wrong Sphere

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...

CVE-2022-38813

CVE-2022-38813 affects PHPGurukul Blood Donor Management System 1.0. The issue is an improper access control that lets an authenticated user switch from a user dashboard to the admin dashboard by altering parameters in the URL (e.g., changing /user/dashboard to /admin/dashboard), enabling access ...

PT-2022-24580

Name of the Vulnerable Software and Affected Versions PHPGurukul Blood Donor Management System version 1.0 Description The issue allows attackers to access all user data, delete users, add and manage Blood Group, and submit reports due to improper access restrictions to the "admin/dashboard.php"...

CVE-2022-38813

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...

PHPGurukul Blood Donor Management System Cross-Site Scripting Vulnerability

The PHPGurukul Blood Donor Management System is a blood donor management system from PHPGurukul, USA. A cross-site scripting vulnerability exists in version 1.0 of the Phpgurukul Blood Donor Management System, which stems from a lack of effective filtering and escaping of user-supplied data at Ad...

CVE-2022-40470

Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature...

CVE-2022-40470

Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature...

Cross site scripting

Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature...

CVE-2022-40470

Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature...

CVE-2022-40470

Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature...

PT-2022-25395 · Unknown · Phpgurukul Blood Bank & Donor Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Blood Donor Management System version 1.0 Description: The issue allows Cross Site Scripting via the Add Blood Group Name Feature. Recommendations: For Phpgurukul Blood Donor Management System version 1.0, consider disabling the Ad...

PHPGurukul Blood Donor Management System 跨站脚本漏洞

The PHPGurukul Blood Donor Management System is a blood donor management system from PHPGurukul, USA. A cross-site scripting vulnerability exists in version 1.0 of the Phpgurukul Blood Donor Management System, which stems from a lack of effective filtering and escaping of user-supplied data at Ad...

CVE-2022-40470

CVE-2022-40470 affects Phpgurukul Blood Donor Management System v1.0. The vulnerability is a Cross Site Scripting flaw in the Add Blood Group Name feature caused by insufficient input filtering/escaping of user-supplied data. Impact is XSS; no exploitation details are provided in the sources. Som...

CVE-2022-40470: Improper Neutralization of Input During Web Page Generation

Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature...

Exploit for Exposure of Resource to Wrong Sphere in Phpgurukul_Blood_Donor_Management_System_Project Phpgurukul_Blood_Donor_Management_System

CVE-2022-38813 Veritical Privilege Escalation via user parame...

CVE-2022-2117

The GiveWP plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.20.2 via the /donor-wall REST-API endpoint which provides unauthenticated users with donor information even when the donor wall is not enabled. This functionality has been...