Lucene search
+L

279 matches found

CNVD
CNVD
•added 2024/11/07 12:00 a.m.•11 views

Hospital Management System Cross-site Scripting Vulnerability (CNVD-2026-32773)

Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a cross-site scripting vulnerability. This vulnerability stems from the parameter searchdata in the hms/doctor/search.php file, which lacks...

5.1CVSS5.8AI score0.00413EPSS
SaveExploits1
CNNVD
CNNVD
•added 2024/11/02 12:00 a.m.•15 views

PHPGurukul Car Rental Portal 跨站脚本漏洞

Car Rental Portal is a rental car portal. Car Rental Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the /search.php file parameter searchdata, which can be exploited by an attacker to execute arbitrary...

6.1CVSS6AI score0.00429EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/11/02 12:00 a.m.•13 views

PT-2024-16476 · Unknown · Phpgurukul Car Rental Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Rental Portal version 1.0 Description: A vulnerability was found in the processing of the file /search.php, where the manipulation of the searchdata argument leads to cross-site scripting. The attack may be initiated remotely...

6.1CVSS6.6AI score0.00429EPSS
SaveExploits1References10
OSV
OSV
•added 2024/10/29 2:15 p.m.•12 views

CVE-2024-51075

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/user-search.php in PHPGurukul Online DJ Booking Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata parameter...

6.1CVSS6.1AI score0.00434EPSS
SaveExploits1References1
NVD
NVD
•added 2024/10/29 2:15 p.m.•28 views

CVE-2024-51076

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/booking-search.php in PHPGurukul Online DJ Booking Management System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter...

6.1CVSS0.00434EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•4 views

CVE-2024-51075: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/user-search.php in PHPGurukul Online DJ Booking Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata parameter...

6.1CVSS6.5AI score0.00434EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/29 12:00 a.m.•41 views

CVE-2024-51075

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/user-search.php in PHPGurukul Online DJ Booking Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata parameter...

0.00434EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/29 12:00 a.m.•34 views

CVE-2024-51076

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/booking-search.php in PHPGurukul Online DJ Booking Management System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter...

0.00434EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/10/29 12:00 a.m.•13 views

PT-2024-34518 · Unknown · Phpgurukul Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online DJ Booking Management System version 1.0 Description: A Reflected Cross Site Scripting XSS issue was found in the "/odms/admin/booking-search.php" API endpoint, allowing remote attackers to execute arbitrary code via the...

6.1CVSS6.8AI score0.00434EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/10/29 12:00 a.m.•15 views

PHPGurukul Online DJ Booking Management System 安全漏洞

PHPGurukul Online DJ Booking Management System is an online DJ booking management system from PHPGurukul. A security vulnerability exists in PHPGurukul Online DJ Booking Management System v1.0, which originates from a reflected cross-site scripting vulnerability in the searchdata parameter of the...

6.1CVSS6.1AI score0.00434EPSS
SaveExploits1References1
CVE
CVE
•added 2024/10/29 12:00 a.m.•79 views

CVE-2024-51076

The CVE-2024-51076 issue affects PHPGurukul Online DJ Booking Management System v1.0. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /odms/admin/booking-search.php endpoint, exploitable via the searchdata parameter to cause arbitrary code execution in the context of a user ses...

6.1CVSS6.7AI score0.00434EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/10/23 12:00 a.m.•12 views

PHPGurukul Medical Card Generation System SQL注入漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which stems from the parameter searchdata in the file /admin/search-medicalcard.php that can lea...

7.2CVSS5.8AI score0.0044EPSS
SaveExploits0References4
OSV
OSV
•added 2024/08/12 1:38 p.m.•17 views

CVE-2024-40484

A Reflected Cross Site Scripting XSS vulnerability was found in "/oahms/search.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" parameter...

6.1CVSS6.1AI score0.00663EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/12 12:00 a.m.•13 views

PHPGurukul Old Age Home Management System 安全漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in version v1.0 of the PHPGurukul Old Age Home Management System, which stems from a Reflected Cross-Site Scripting XSS vulnerability in the searchdata parameter of...

6.1CVSS5.7AI score0.00663EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/05/26 12:00 a.m.•14 views

Zoo Management System SQL注入漏洞

Zoo Management System is a zoo management system by the individual developer Carlo Montero. It provides an online and automated platform for zoo organizations to manage their daily records. A SQL injection vulnerability exists in version 2.1 of the PHPGurukul Zoo Management System, which stems fr...

9.8CVSS7AI score0.00419EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/05/26 12:00 a.m.•18 views

Zoo Management System SQL注入漏洞

Zoo Management System is a zoo management system by the individual developer Carlo Montero. It provides an online and automated platform for zoo organizations to manage their daily records. A SQL injection vulnerability exists in version 2.1 of the PHPGurukul Zoo Management System, which stems fr...

9.8CVSS7AI score0.00419EPSS
SaveExploits0References5
OSV
OSV
•added 2024/04/17 7:15 p.m.•18 views

CVE-2024-30990

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter...

9.8CVSS6.1AI score0.00628EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/17 7:15 p.m.•25 views

CVE-2024-30990

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter...

9.8CVSS8.3AI score0.00628EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•11 views

Phpgurukul Client Management System SQL注入漏洞

Phpgurukul Client Management System is a client management system from the US-based PHPGurukul Inc. Phpgurukul Client Management System suffers from a SQL injection vulnerability that originates from a SQL injection contained in the Invoices page, which allows an attacker to execute arbitrary cod...

9.8CVSS8.6AI score0.00628EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•1 views

CVE-2024-30990: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter...

9.8CVSS6.4AI score0.00628EPSS
SaveExploits1References2
Rows per page
Query Builder