CVE-2020-5509

PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image...

CVE-2020-5509

CVE-2020-5509 affects PHPGurukul Car Rental Project v1.0. It allows Remote Code Execution via an executable file uploaded as a new profile image, due to improper validation of uploaded files. Exploit details are described in Exploit-DB and PacketStorm reports, and PT-2020-18486 recommends restric...

CVE-2020-5193

CVE-2020-5193 affects PHPGurukul Hospital Management System in PHP v4.0. The issue is multiple reflected XSS vulnerabilities exploitable via the searchdata and Doctorspecialization parameters, enabling injection of arbitrary scripts in end-user browsers. No official patch/version update details a...

CVE-2020-5193

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter...

PHPGurukul Small CRM SQL Injection Vulnerability

PHPGurukul Small CRM is a customer relationship management system. A SQL injection vulnerability exists in the /in.php file in version v2.0 of PHPGurukul Small CRM. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker c...

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...

Design/Logic Flaw

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is affected by SQL injection (CVE-2020-5307) as demonstrated by input vectors in index.php (username), add-category.php (category, CategoryCode), add-company.php (CompanyName), and add-product.php (ProductName, ProductPrice). Root cause: lack of va...

CVE-2020-5511

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page...

CVE-2020-5510

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...

Sql injection

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page...

Sql injection

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...

CVE-2020-5511

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page...

CVE-2020-5511

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page...

CVE-2020-5511

PHPGurukul Small CRM v2.0 is vulnerable to an authentication bypass via SQL injection on the administrator login page. The root cause is lack of validation of externally entered SQL statements in the /in***.php file (v2.0). This can permit unauthorized access to the admin area, with potential fur...

CVE-2020-5510

PHPGurukul Hostel Management System v2.0 is affected by an SQL injection in the full-profile.php file via the id parameter. The root cause is unsanitized external input allowing crafted SQL commands, potentially enabling data leakage or modification as described. Remediation and mitigations are m...

CVE-2020-5510

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...

Complaint Management System 4.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Complaint Management System 4.0 - Remote Code Execution Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/complaint-management-sytem/ Version: v4.0 Category:...

Job Portal 1.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Job Portal 1.0 - Remote Code Execution Exploit Author: Tib3rius Vendor Homepage: https://phpgurukul.com/job-portal-project/ Software Link: https://phpgurukul.com/?smdprocessdownload=1&downloadid=7855 Version: 1.0 Tested on: Ubun...