7732 matches found
CVE-2021-27544
CVE-2021-27544 describes a cross-site scripting vulnerability in the PHPGurukul Beauty Parlour Management System v1.0, specifically in the add-services.php component where the parameter “sername” can be injected with arbitrary HTML to execute code remotely. The vulnerability is confirmed across m...
CVE-2021-27545: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into the "sername" parameter...
CVE-2021-27544: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "sername" parameter...
PHPGurukul Online Book Store SQL注入漏洞
PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store version 1.0 that could allow a remote attacker to execute arbitrary SQL commands and bypass authentication...
PHPGurukul Car Rental Arbitrary File Upload (CVE-2021-26809)
An arbitrary file upload vulnerability exists in PHPGurukul Car Rental. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Beauty Parlour Management System 1.0 SQL Injection
Exploit Title: Beauty Parlour Management System 1.0 - 'Service Name' SQL Injection Google Dork: N/A Date: 19/2/2021 Exploit Author: Thinkland Security Team Vendor Homepage: https://phpgurukul.com/beauty-parlour-management-system-using-php-and-mysql/ Software Link:...
CVE-2021-26809
PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php...
CVE-2021-26809
PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php...
Remote code execution
PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php...
CVE-2021-26809
CVE-2021-26809 affects PHPGurukul Car Rental Project version 2.0. The vulnerability is a remote shell upload in changeimage1.php, enabling an attacker to upload arbitrary code and potentially take control of the system. Practical impact is remote code execution with high severity. Remediation/mit...
CVE-2021-26809
PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php...
CVE-2021-26809: Unrestricted Upload of File with Dangerous Type
PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php...
PT-2021-17143 · Unknown · Phpgurukul Car Rental Project
Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Rental Project version 2.0 Description: The issue is related to a remote shell upload vulnerability. This vulnerability is present in the changeimage1.php file, allowing for potential malicious activity. Recommendations: For...
Online Marriage Registration System (OMRS) 1.0 - Remote code execution (3)
Exploit Title: Online Marriage Registration System OMRS 1.0 - Remote code execution 3 Date: 10/02/2021 Exploit Author: Ricardo Ruiz @ricardojoserf Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-marriage-registration-system-using-php-and-mysql/ Version: 1.0...
Online Marriage Registration System 1.0 Remote Code Execution
Exploit Title: Online Marriage Registration System OMRS 1.0 - Remote code execution 3 Date: 10/02/2021 Exploit Author: Ricardo Ruiz @ricardojoserf Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-marriage-registration-system-using-php-and-mysql/ Version: 1.0...
Car Rental Project 2.0 - Arbitrary File Upload to Remote Code Execution
Exploit Title: Car Rental Project 2.0 - Arbitrary File Upload to Remote Code Execution Date: 3/2/2021 Exploit Author: Jannick Tiger Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/car-rental-project-php-mysql-free-download/ Version: V 2.0 Tested on Windows 10, XAMPP...
Car Rental Project 2.0 Shell Upload
Exploit Title: Car Rental Project 2.0 - Arbitrary File Upload to Remote Code Execution Date: 3/2/2021 Exploit Author: Jannick Tiger Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/car-rental-project-php-mysql-free-download/ Version : V 2.0 Vulnerability Type:...
Zoo Management System 1.0 - 'anid' SQL Injection
Exploit Title: Zoo Management System 1.0 - 'anid' SQL Injection Google Dork: N/A Date: 29/1/2021 Exploit Author: Zeyad Azima Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/zoo-management-system-using-php-and-mysql/ Version: V1 Tested on: Windows Identify the...