Lucene search
K

22 matches found

NVD
NVD
added 2026/03/23 4:16 p.m.1 views

CVE-2024-51223

A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Mobile Number parameter...

4.8CVSS0.00054EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.2 views

PT-2026-27139

A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Mobile Number parameter...

4.8CVSS5.8AI score0.00054EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/23 12:0 a.m.2 views

CVE-2024-51223

A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Mobile Number parameter...

4.8CVSS5.8AI score0.00054EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/03/23 12:0 a.m.20 views

CVE-2024-51223

A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Mobile Number parameter...

0.00054EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/03/23 12:0 a.m.2 views

CVE-2024-51223

A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Mobile Number parameter...

5.8AI score0.00054EPSS
Exploits1References2
CNVD
CNVD
added 2025/12/09 12:0 a.m.3 views

Billing System password-recovery.php Endpoint SQL Injection Vulnerability

Billing System is a billing system. The Billing System suffers from a SQL injection vulnerability that stems from the username and mobileno parameters in the /admin/password-recovery.php endpoint not validating user input. An attacker can use this vulnerability to steal, tamper, or delete sensiti...

6.5CVSS7.7AI score0.00025EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.4 views

PT-2025-48776

Name of the Vulnerable Software and Affected Versions PHPGurukul Billing System version 1.0 Description The PHPGurukul Billing System version 1.0 contains a SQL Injection flaw in the /admin/password-recovery.php endpoint. The username and mobileno parameters do not properly validate user-supplied...

6.5CVSS7.4AI score0.00025EPSS
Exploits0References5
NVD
NVD
added 2025/11/17 7:16 p.m.1 views

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

6.5CVSS0.00037EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/11/17 12:0 a.m.4 views

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

0.00037EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-24955

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00204EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/09/22 3:32 p.m.8 views

CVE-2025-10804 Campcodes Online Beauty Parlor Management System add-customer.php sql injection

A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add-customer.php. Performing manipulation of the argument mobilenum results in sql injection. The attack can be initiated remotely. The exploi...

6.5CVSS0.00058EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/09/03 12:0 a.m.1 views

CVE-2025-57146

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

7.6AI score0.00059EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/09/02 12:0 a.m.2 views

PHPGurukul Beauty Parlour Management System 安全漏洞

Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of externally-entered SQL statements in t...

9.8CVSS8.1AI score0.00087EPSS
Exploits1References9
Vulnrichment
Vulnrichment
added 2025/08/14 9:32 p.m.4 views

CVE-2025-8985 SourceCodester COVID 19 Testing Management System profile.php sql injection

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been...

7.5CVSS7.6AI score0.00204EPSS
Exploits1References5
OSV
OSV
added 2025/06/04 11:15 p.m.3 views

CVE-2025-5616

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be launched remotely...

8.8CVSS5.8AI score
Exploits0References5
CNNVD
CNNVD
added 2025/06/04 12:0 a.m.1 views

PHPGurukul Dairy Farm Shop Management System SQL注入漏洞

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter mobilenumber in the file...

9.8CVSS8.2AI score0.00277EPSS
Exploits1References5
CNVD
CNVD
added 2025/05/22 12:0 a.m.0 views

Human Metapneumovirus Testing Management System /profile.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter...

9.8CVSS8.3AI score0.00204EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.3 views

PHPGurukul Human Metapneumovirus Testing Management System 注入漏洞

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter...

9.8CVSS7.9AI score0.00204EPSS
Exploits1References7
CNVD
CNVD
added 2025/05/07 12:0 a.m.1 views

Nipah virus Testing Management System profile.php file SQL Injection Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter adminname/mobilenumber in file...

9.8CVSS8.3AI score0.0011EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/04/27 12:0 a.m.4 views

PHPGurukul COVID19 Testing Management System 注入漏洞

The PHPGurukul COVID19 Testing Management System is a new crown pneumonia testing management system from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul COVID19 Testing Management System, which originates from a SQL injection due to the incorrect operation of t...

9.8CVSS7.8AI score0.00223EPSS
Exploits0References6
Rows per page
Query Builder