7732 matches found
Sql injection
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt...
Cross site scripting
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php...
CVE-2020-10107
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php...
CVE-2020-10107
CVE-2020-10107: PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, evidenced by the ExpenseItem and ExpenseCost parameters within manage-expense.php. The Red Hat and NVD records corroborate a stored XSS issue affecting this application. No exploitation routes, affected versi...
CVE-2020-10106
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt...
CVE-2020-10106
CVE-2020-10106 affects PHPGurukul Daily Expense Tracker System 1.0. The Red Hat/NVD entries confirm a SQL injection via the email parameter in index.php or register.php, enabling dumping of the MySQL database and bypassing the login prompt. The vulnerability is driven by improper handling of user...
CVE-2020-10106: Improper Neutralization of Special Elements used in an SQL Command
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt...
CVE-2020-10107: Improper Neutralization of Input During Web Page Generation
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php...
Phpgurukul Hospital Management System Authentication Bypass
An authentication bypass vulnerability exists in Phpgurukul Hospital Management System. Successful exploitation of this vulnerability allows an attacker to gain complete access to the configuration of the affected system...
Online Birth Certificate System 1.0 Cross Site Scripting
Exploit Title: Online Birth Certificate System 1.0 Stored Cross-Site Scripting Vulnerability Date: 2020-02-21 Exploit Author: Priyanka Samak Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-birth-certificate-system-using-php-and- mysql/ Software: : Online Birt...
PHPGurukul Hostel Management System SQL Injection Vulnerability
PHPGurukul Hostel Management System is a hostel management system. A SQL injection vulnerability exists in version v2.0 of the PHPGurukul Hostel Management System. The vulnerability stems from a database-based application that lacks validation of externally entered SQL statements. An attacker can...
CVE-2020-5509
PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image...
CVE-2020-5509
PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image...
Remote code execution
PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image...
CVE-2020-5193
PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter...
Cross site scripting
PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter...
CVE-2020-5509
PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image...
CVE-2020-5509
CVE-2020-5509 affects PHPGurukul Car Rental Project v1.0. It allows Remote Code Execution via an executable file uploaded as a new profile image, due to improper validation of uploaded files. Exploit details are described in Exploit-DB and PacketStorm reports, and PT-2020-18486 recommends restric...
CVE-2020-5193
CVE-2020-5193 affects PHPGurukul Hospital Management System in PHP v4.0. The issue is multiple reflected XSS vulnerabilities exploitable via the searchdata and Doctorspecialization parameters, enabling injection of arbitrary scripts in end-user browsers. No official patch/version update details a...