PHPGurukul Small CRM SQL Injection Vulnerability

PHPGurukul Small CRM is a customer relationship management system. A SQL injection vulnerability exists in the /in.php file in version v2.0 of PHPGurukul Small CRM. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker c...

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...

Design/Logic Flaw

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is affected by SQL injection (CVE-2020-5307) as demonstrated by input vectors in index.php (username), add-category.php (category, CategoryCode), add-company.php (CompanyName), and add-product.php (ProductName, ProductPrice). Root cause: lack of va...

CVE-2020-5308: Improper Neutralization of Input During Web Page Generation

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...

CVE-2020-5511

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page...

CVE-2020-5510

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...

Sql injection

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...

Sql injection

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page...

CVE-2020-5511

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page...

CVE-2020-5511

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page...

CVE-2020-5511

PHPGurukul Small CRM v2.0 is vulnerable to an authentication bypass via SQL injection on the administrator login page. The root cause is lack of validation of externally entered SQL statements in the /in***.php file (v2.0). This can permit unauthorized access to the admin area, with potential fur...

CVE-2020-5510

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...

CVE-2020-5510

PHPGurukul Hostel Management System v2.0 is affected by an SQL injection in the full-profile.php file via the id parameter. The root cause is unsanitized external input allowing crafted SQL commands, potentially enabling data leakage or modification as described. Remediation and mitigations are m...

PT-2020-18488 · Phpgurukul · Phpgurukul Small Crm

Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 2.0 Description: The issue concerns an authentication bypass via SQL injection when logging into the administrator login page. This allows unauthorized access, potentially leading to further malicious activities...

CVE-2020-5510: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...

Complaint Management System 4.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Complaint Management System 4.0 - Remote Code Execution Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/complaint-management-sytem/ Version: v4.0 Category:...

Job Portal 1.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Job Portal 1.0 - Remote Code Execution Exploit Author: Tib3rius Vendor Homepage: https://phpgurukul.com/job-portal-project/ Software Link: https://phpgurukul.com/?smdprocessdownload=1&downloadid=7855 Version: 1.0 Tested on: Ubun...

CVE-2020-5511: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page...