117 matches found
CVE-2024-54790
CVE-2024-54790 affects PHPGurukul Pre-School Enrollment System v1.0. The vulnerability is a SQL Injection in /index.php via the visittime parameter, enabling remote attackers to execute arbitrary code. The CVSS vector indicates network access with high impact to confidentiality, integrity, and av...
CVE-2024-54810
CVE-2024-54810 affects PHPGurukul Pre-School Enrollment System Project v1.0. The vulnerability is a SQL Injection in /preschool/admin/password-recovery.php that allows remote attackers to execute arbitrary code via the mobileno parameter. Base metrics indicate CRITICAL impact (CVSS 3.1: AV:N/AC:L...
CVE-2024-54810
A SQL Injection vulnerability was found in /preschool/admin/password-recovery.php in PHPGurukul Pre-School Enrollment System Project v1.0, which allows remote attackers to execute arbitrary code via the mobileno parameter...
CVE-2024-54810
A SQL Injection vulnerability was found in /preschool/admin/password-recovery.php in PHPGurukul Pre-School Enrollment System Project v1.0, which allows remote attackers to execute arbitrary code via the mobileno parameter...
CVE-2023-47445
Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...
CVE-2023-47446
Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...
CVE-2023-47445
Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...
CVE-2023-47446
Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...
CVE-2023-47446
Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...
CVE-2023-47445
Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...
Sql injection
Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...
CVE-2023-47445
Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...
CVE-2023-47445
CVE-2023-47445 affects Pre-School Enrollment version 1.0; a SQL Injection vulnerability exists in the username parameter of the preschool/admin/ page. Root cause is improper input handling allowing crafted input to alter SQL queries, leading to potential confidentiality, integrity, and availabili...
CVE-2023-47446
Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...
CVE-2023-47446
Affected software: PHPGurukul Pre-School Enrollment (Web-based system) v1.0. Vulnerability: Cross-Site Scripting (XSS) on profile.php via the fullname parameter. Root cause (as stated): XSS vulnerability; details on input handling/output encoding not provided. Impact (as stated): enables executio...