47 matches found
EUVD-2010-4948
Malware in sbrugna...
EUVD-2019-3124
Malware in sbrugna...
CVE-2024-55232
An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information...
CVE-2025-4509 PHPGurukul e-Diary Management System manage-notes.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul e-Diary Management System 1.0. This issue affects some unknown processing of the file /manage-notes.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit ha...
CVE-2025-4509
PHPGurukul e-Diary Management System 1.0 is affected by a SQL injection in /manage-notes.php via the ID parameter. The vulnerability allows remote attacker input manipulation, potentially leading to unauthorized data access or modification. Publicly disclosed exploits exist. Acknowledged mitigati...
CVE-2025-4509: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in PHPGurukul e-Diary Management System 1.0. This issue affects some unknown processing of the file /manage-notes.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit ha...
CVE-2025-3188: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in PHPGurukul e-Diary Management System 1.0. This affects an unknown part of the file /add-notes.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-55232
An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information...
CVE-2024-55232: Authentication Bypass by Spoofing
An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information...
CVE-2024-55231: Authorization Bypass Through User-Controlled Key
An IDOR vulnerability in the edit-notes.php module of PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to modify notes belonging to other accounts due to missing authorization checks. This flaw exposes sensitive data and enables attackers to alter another user's...
PT-2024-36497
Name of the Vulnerable Software and Affected Versions PHPGurukul Online Notes Sharing Management System version 1.0 Description An IDOR vulnerability in the edit-notes.php module allows unauthorized users to modify notes belonging to other accounts due to missing authorization checks. This flaw...
CVE-2023-7054 PHPGurukul Online Notes Sharing System add-notes.php unrestricted upload
A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /user/add-notes.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclose...
CVE-2023-7054: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /user/add-notes.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclose...
CVE-2023-7051: Cross-Site Request Forgery (CSRF)
A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/manage-notes.php of the component Notes Handler. The manipulation of the argument delid leads to cross-site request forgery...
PT-2019-14895
Name of the Vulnerable Software and Affected Versions FusionPBX versions prior to 4.5.8 Description The issue concerns the use of an unsanitized id variable in the contact notes.php file, which is reflected in HTML. This leads to a cross-site scripting XSS issue, where an attacker can inject...
Design/Logic Flaw
I, Librarian 4.10 has XSS via the notes.php notes parameter...
CVE-2019-11449
I, Librarian 4.10 has XSS via the notes.php notes parameter...
CVE-2019-11449
CVE-2019-11449 affects I, Librarian 4.10 with an XSS vulnerability via the notes parameter in notes.php. The vulnerability is caused by unsanitized input in the notes parameter, enabling cross-site scripting when processed by the application. Impact details are limited in the provided documents; ...
