Lucene search
+L

7732 matches found

OSV
OSV
•added 2021/01/29 2:15 a.m.•10 views

CVE-2021-26303

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field...

6.1CVSS6.4AI score0.00782EPSS
SaveExploits1References1
NVD
NVD
•added 2021/01/29 2:15 a.m.•29 views

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

5.4CVSS5.2AI score0.00583EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/01/29 2:15 a.m.•12 views

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

5.4CVSS5.5AI score0.00583EPSS
SaveExploits1References2
Prion
Prion
•added 2021/01/29 2:15 a.m.•22 views

Design/Logic Flaw

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field...

4.3CVSS5.8AI score0.00782EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2021/01/29 2:15 a.m.•25 views

Design/Logic Flaw

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

3.5CVSS5.1AI score0.00583EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/01/29 1:48 a.m.•71 views

CVE-2021-26303

The vulnerability CVE-2021-26303 affects PHPGurukul Daily Expense Tracker System 1.0, where a stored XSS is possible via the user-profile.php Full Name field . The root cause is unsanitized input being stored and later rendered, enabling an attacker to inject script into the profile display. The ...

6.1CVSS5.9AI score0.00782EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/01/29 1:48 a.m.•29 views

CVE-2021-26303

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field...

6AI score0.00782EPSS
SaveExploits1References1
CVE
CVE
•added 2021/01/29 1:48 a.m.•81 views

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to a stored XSS flaw via the add-expense.php Item parameter (CVE-2021-26304). The vulnerability is confirmed across multiple sources in the connected documents; exploitation details beyond “stored XSS via the add-expense.php Item parameter...

5.4CVSS5.1AI score0.00583EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/01/29 1:48 a.m.•35 views

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

5.4AI score0.00583EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/29 12:00 a.m.•7 views

CVE-2021-26304: Improper Neutralization of Input During Web Page Generation

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

5.4CVSS5.8AI score0.00583EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/29 12:00 a.m.•6 views

CVE-2021-26303: Improper Neutralization of Input During Web Page Generation

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field...

6.1CVSS5.8AI score0.00782EPSS
SaveExploits1References2
NVD
NVD
•added 2021/01/07 9:15 p.m.•31 views

CVE-2020-35745

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs...

8.8CVSS8.7AI score0.01752EPSS
SaveExploits1References3
CVE
CVE
•added 2021/01/07 8:29 p.m.•78 views

CVE-2020-35745

Consolidated details for CVE-2020-35745 show a vulnerability in PHPGURUKUL Hospital Management System v4.0 where access to admin/dashboard.php is not properly restricted. The root cause is improper access control on the admin dashboard, enabling an attacker to view all user, doctor, and patient d...

8.8CVSS8.5AI score0.01752EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/01/07 8:29 p.m.•41 views

CVE-2020-35745

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs...

8.7AI score0.01752EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/07 12:00 a.m.•8 views

CVE-2020-35745: Missing Authorization

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs...

8.8CVSS5.8AI score0.01752EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
•added 2020/12/29 12:00 a.m.•33 views

PHPGurukul Admin Panel SQL Injection (CVE-2020-25952)

An SQL Injection vulnerability exists in PHPGurukul Admin Panel. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...

7.5CVSS3.3AI score0.04127EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2020/12/29 12:00 a.m.•29 views

PHPGurukul Admin Panel Stored Cross Site Scripting (CVE-2020-24723)

A stored cross-site scripting vulnerability exists in PHPGurukul Admin Panel. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

3.5CVSS4.6AI score0.01017EPSS
SaveExploits1
OSV
OSV
•added 2020/12/26 2:15 a.m.•13 views

CVE-2020-26766

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

8.8CVSS7.3AI score0.00645EPSS
SaveExploits1References1
NVD
NVD
•added 2020/12/26 2:15 a.m.•27 views

CVE-2020-26766

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

8.8CVSS8.8AI score0.00645EPSS
SaveExploits1References1
Prion
Prion
•added 2020/12/26 2:15 a.m.•29 views

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

6.8CVSS8.8AI score0.00645EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder