CVE-2022-40470

CVE-2022-40470 affects Phpgurukul Blood Donor Management System v1.0. The vulnerability is a Cross Site Scripting flaw in the Add Blood Group Name feature caused by insufficient input filtering/escaping of user-supplied data. Impact is XSS; no exploitation details are provided in the sources. Som...

CVE-2022-40470: Improper Neutralization of Input During Web Page Generation

Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature...

PHPGurukul Blood Donor Management System 跨站脚本漏洞

The PHPGurukul Blood Donor Management System is a blood donor management system from PHPGurukul, USA. A cross-site scripting vulnerability exists in version 1.0 of the Phpgurukul Blood Donor Management System, which stems from a lack of effective filtering and escaping of user-supplied data at Ad...

CVE-2022-40470

Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature...

CVE-2022-42205

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...

CVE-2022-42206

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

Cross site scripting

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

CVE-2022-42206: Improper Neutralization of Input During Web Page Generation

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

PT-2022-26312 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It affects the "doctor/view-patient.php", "admin/view-patient.php", and "view-medhistory.php" endpoints...

CVE-2022-42206

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

CVE-2022-42205

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...

CVE-2022-42206

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

CVE-2022-42205: Improper Neutralization of Input During Web Page Generation

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...

CVE-2022-42205

PHPGurukul Hospital Management System (PHP, v4.0) has an XSS vulnerability in add-patient.php due to insufficient input validation/encoding. An attacker can inject JavaScript via user-supplied fields, potentially compromising other users (including admins) and their sessions. No official patch/ve...

PT-2022-26311 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns a Cross Site Scripting XSS flaw. This type of flaw occurs when an application includes user input in its output without proper validation or encoding, allowing ...

CVE-2022-42205

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via add-patient.php...

CVE-2022-42206

CVE-2022-42206 affects PHPGurukul Hospital Management System, version 4.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the endpoints connected to view-patient.php and view-medhistory.php. Root cause indicated by multiple sources is unsanitized/unsafely handled input in ...

Bus Pass Management System 1.0 Cross Site Scripting

Exploit Title: Bus Pass Management System 1.0 - 'searchdata' Cross-Site Scripting XSS Date: 2022-07-02 Exploit Author: Ali Alipour Vendor Homepage: https://phpgurukul.com/bus-pass-management-system-using-php-and-mysql Software Link:...

CVE-2020-23466

Cross Site Scripting XSS vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field...

CVE-2020-23466

CVE-2020-23466 concerns a Cross Site Scripting (XSS) vulnerability in the phpgurukul Online Marriage Registration System version 1.0, exploitable via the wzipcode field. The PT-2022-8660 entry documents the affected software/version and notes that unsanitized input in the wzipcode field enables a...