PHPGurukul Hospital Management System SQL注入漏洞

PHPGurukul Hospital Management System is a web application for hospitals to manage doctors and patients. A SQL injection vulnerability exists in \hms\getdoctor.php in PHPGurukul Hospital Management System version 4.0. An attacker can exploit this vulnerability to obtain sensitive information from...

CVE-2020-22170: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\getdoctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22167: Improper Neutralization of Input During Web Page Generation

PHPGurukul Hospital Management System in PHP v4.0 has a Persistent Cross-Site Scripting vulnerability in \hms\admin\appointment-history.php. Remote registered users can exploit the vulnerability to obtain user cookie data...

CVE-2020-22172: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\getdoctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22164: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\checkavailability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22171: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\registration.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

Teachers Record Management System 1.0 Cross Site Scripting

Exploit Title: Teachers Record Management System 1.0 – 'email' Stored Cross-site Scripting XSS vulnerability Authenticated Date: 05-10-2021 Exploit Author: nhattruong or https://nhattruong.blog Vendor Homepage: https://phpgurukul.com Software Link:...

Teachers Record Management System 1.0 SQL Injection

Exploit Title: Teachers Record Management System 1.0 – Multiple SQL Injection Authenticated Date: 05-10-2021 Exploit Author: nhattruong or https://nhattruong.blog Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/teachers-record-management-system-using-php-and-mysql/...

Teachers Record Management System 1.0 - 'Multiple' SQL Injection (Authenticated)

Exploit Title: Teachers Record Management System 1.0 – Multiple SQL Injection Authenticated Date: 05-10-2021 Exploit Author: nhattruong Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/teachers-record-management-system-using-php-and-mysql/ Version: 1.0 Tested on:...

COVID19 Testing Management System 1.0 Cross Site Scripting

Exploit Title: COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting XSS Date: 19/05/2021 Exploit Author: Rohit Burke Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/ Version: 1.0 Tested on:...

PHPGurukul Online Book Store SQL Injection Vulnerability (CNVD-2021-34108)

PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0, which can be exploited by attackers to execute arbitrary code...

PHPGurukul Online Book Store SQL Injection Vulnerability (CNVD-2021-34502)

PHPGurukul Online Book Store is a simple online web store made with php, mysql and bootstrap. Online Book Store version 1.0 suffers from a SQL injection vulnerability. The vulnerability can be exploited to execute arbitrary code via the pubid parameter of bookPerPub.php...

PHPGurukul Beauty Parlour Management System Cross-Site Scripting Vulnerability

PHPGurukul Beauty Parlour Management System is an application from PHPGurukul Inc. A beauty parlor management system. A cross-site scripting vulnerability exists in PHPGurukul Beauty Parlour Management System v1.0, which can be exploited by a remote attacker to execute arbitrary code by injecting...

PHPGurukul Online Book Store SQL Injection Vulnerability (CNVD-2021-35002)

PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0. The vulnerability can be exploited to execute arbitrary code via the bookisbn parameter of book.php...

PHPGurukul Online Book Store Access Control Error Vulnerability

PHPGurukul Online Book Store is a PHP-based online bookstore website system. An access control error vulnerability exists in adminverify.php in Online Book Store v1.0. An attacker can exploit this vulnerability to bypass authentication and obtain sensitive information...

PHPGurukul Online Book Store Arbitrary File Upload Vulnerability

PHPGurukul Online Book Store is a PHP-based online bookstore website system. An arbitrary file upload vulnerability exists in adminadd.php in PHPGurukul Online Book Store v1.0. An attacker can exploit this vulnerability to achieve remote code execution...

PHPGurukul Online Book Store SQL Injection Vulnerability (CNVD-2021-35003)

PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0. The vulnerability can be exploited to execute arbitrary code via the bookisbn parameter of adminedit.php...

PHPGurukul Online Book Store SQL Injection Vulnerability (CNVD-2021-35001)

PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0, which arises from the lack of validation of externally entered SQL statements in database-based applications, and can be exploited by remote attackers to...

PHPGurukul Online Book Store SQL注入漏洞

PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0, which allows remote malicious users to execute arbitrary code...

PHPGurukul Online Book Store 授权问题漏洞

PHPGurukul Online Book Store is a PHP-based online bookstore website system. An access control error vulnerability exists in adminverify.php in Online Book Store v1.0. An attacker can exploit this vulnerability to bypass authentication and obtain sensitive information...