Sql injection

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

CVE-2020-25952

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

CVE-2020-25952

CVE-2020-25952 affects PHPGurukul User Registration & Login and User Management System With admin panel v2.1. Description and connected sources confirm a SQL injection flaw that lets remote attackers execute arbitrary SQL and bypass authentication by exploiting unsafely constructed queries in the...

Phpgurukul User Registration Login Management System SQL Injection Vulnerability

Phpgurukul User Registration Login Management System is a website builder for user management by the PHPGurukul Phpgurukul team. A SQL injection vulnerability in the PHPGurukul User Registration Login and User Management System, admin panel version 2.1 allows remote attackers to execute arbitrary...

PT-2020-16255 · Phpgurukul · Phpgurukul User Registration & Login/User Management System With Admin Panel

Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System With admin panel version 2.1 Description: The issue allows remote attackers to execute arbitrary SQL commands and bypass authentication. This is a SQL injection vulnerability...

User Registration And Login And User Management System 2.1 Cross Site Scripting

Exploit Title: User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS Google Dork: N/A Date: 2020-08-07 Exploit Author: yusufmalikul Vendor Homepage: https://phpgurukul.com Software Link:...

Hostel Management System 2.1 Cross Site Scripting

Exploit Title: PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, City Google Dork: N/A Date: 2020-10-08 Exploit Author: Kokn3t Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/hostel-management-syste...

User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS

Exploit Title: User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS Google Dork: N/A Date: 2020-08-07 Exploit Author: yusufmalikul Vendor Homepage: https://phpgurukul.com Software Link:...

Hostel Management System 2.1 - Cross Site Scripting (Multiple Fields)

Exploit Title: PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, City Google Dork: N/A Date: 2020-10-08 Exploit Author: Kokn3t Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/hostel-management-syste...

Tourism Management System 1.0 Shell Upload

Exploit Title: Tourism Management System 1.0 - Arbitrary File Upload Date: 2020-10-19 Exploit Author: Ankita Pal & Saurav Shukla Vendor Homepage: https://phpgurukul.com/tourism-management-system-free-download/ Software Link: https://phpgurukul.com/?smdprocessdownload=1&downloadid=7204 Version: V1...

Tourism Management System 1.0 - Arbitrary File Upload

Exploit Title: Tourism Management System 1.0 - Arbitrary File Upload Date: 2020-10-19 Exploit Author: Ankita Pal & Saurav Shukla Vendor Homepage: https://phpgurukul.com/tourism-management-system-free-download/ Software Link: https://phpgurukul.com/?smdprocessdownload=1&downloadid=7204 Version: V1...

Company Visitor Management System (CVMS) 1.0 SQL Injection

Exploit Title: Company Visitor Management System CVMS 1.0 - Authentication Bypass Date: 16/10/2020 Exploit Author: Oğuz Türkgenç Vendor Homepage: https://phpgurukul.com/company-visitor-management-system-using-php-and-mysql/ Software Link: https://phpgurukul.com/?smdprocessdownload=1&downloadid=96...

CVE-2020-25271

PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...

CVE-2020-25270

PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...

Cross site scripting

PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...

Design/Logic Flaw

PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...

CVE-2020-25270

CVE-2020-25270 affects PHPGurukul hostel-management-system version 2.1. It specifies a cross-site scripting (XSS) vulnerability via input fields in the Guardian section (Guardian Name, Guardian Relation, Guardian Contact no, Address, City) that can trigger script execution. Multiple connected sou...

CVE-2020-25270

PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...

CVE-2020-25271

The CVE-2020-25271 entry concerns PHPGurukul hospital-management-system-in-php version 4.0, where multiple endpoints (admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, admin/appointment-history.php) expose an XSS vulnerability. Root cause and exact...

CVE-2020-25271

PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...