Lucene search
+L

443 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/06 12:00 a.m.•4 views

CVE-2024-48703: Improper Neutralization of Input During Web Page Generation

PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/search-medicalcard.php via the searchdata parameter...

4.8CVSS5.8AI score0.00274EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/06 12:00 a.m.•104 views

CVE-2024-48703

The CVE-2024-48703 entry affects PhpGurukul Medical Card Generation System v1.0, with a Cross-Site Scripting (XSS) vulnerability in /admin/search-medicalcard.php via the searchdata parameter. The underlying issue is improper handling of input leading to script injection; impact is limited to XSS ...

4.8CVSS5.8AI score0.00274EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/12/06 12:00 a.m.•36 views

CVE-2024-48703

PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/search-medicalcard.php via the searchdata parameter...

0.00274EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/06 12:00 a.m.•19 views

PT-2024-33185 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PhpGurukul Medical Card Generation System version 1.0 Description: The issue is related to Cross Site Scripting XSS in the /admin/search-medicalcard.php endpoint via the searchdata parameter. This allows for potential malicious script...

4.8CVSS6.3AI score0.00274EPSS
SaveExploits1References6
OSV
OSV
•added 2024/11/27 2:15 p.m.•18 views

CVE-2024-53635

A Reflected Cross Site Scripting XSS vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter...

4.8CVSS6.1AI score0.00486EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/27 2:15 p.m.•45 views

CVE-2024-53635

A Reflected Cross Site Scripting XSS vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter...

4.8CVSS0.00486EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/27 12:00 a.m.•3 views

CVE-2024-53635: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter...

4.8CVSS6.5AI score0.00486EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/27 12:00 a.m.•15 views

PT-2024-35797 · Unknown · Phpgurukul Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID 19 Testing Management System version 1.0 Description: A Reflected Cross Site Scripting XSS issue was found in the /covid-tms/patient-search-report.php endpoint, which allows remote attackers to execute arbitrary code via the...

4.8CVSS6.9AI score0.00486EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/11/27 12:00 a.m.•22 views

CVE-2024-53635

A Reflected Cross Site Scripting XSS vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter...

6.7AI score0.00486EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/11/27 12:00 a.m.•15 views

PHPGurukul COVID 19 Testing Management System 跨站脚本漏洞

PHPGurukul COVID 19 Testing Management System is a COVID 19 testing management system from PHPGurukul Inc. A cross-site scripting vulnerability exists in PHPGurukul COVID 19 Testing Management System v1.0, which stems from a Reflective Cross-Site Scripting XSS vulnerability that allows remote...

4.8CVSS5.7AI score0.00486EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/25 12:00 a.m.•4 views

CVE-2024-11649: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated...

9.8CVSS7AI score0.00851EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/11/25 12:00 a.m.•15 views

1000 Projects Beauty Parlour Management System SQL注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the parameter searchdata that can...

9.8CVSS7.9AI score0.00851EPSS
SaveExploits1References5
OSV
OSV
•added 2024/11/12 4:15 a.m.•12 views

CVE-2024-11101

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack...

9.8CVSS5.8AI score0.00525EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/12 12:00 a.m.•2 views

CVE-2024-11101: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack...

9.8CVSS5.3AI score0.00525EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/11/12 12:00 a.m.•13 views

1000 Projects Beauty Parlour Management System 安全漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A security vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the parameter searchdata that can lead ...

9.8CVSS5.5AI score0.00525EPSS
SaveExploits1References5
OSV
OSV
•added 2024/11/11 3:15 p.m.•16 views

CVE-2024-50989

A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL commands via the "searchdata " parameter...

9.8CVSS6.1AI score0.0051EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/11 3:15 p.m.•19 views

CVE-2024-50990

A Reflected Cross Site Scriptng XSS vulnerability was found in /omrs/user/search.php in PHPGurukul Online Marriage Registration System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter...

6.1CVSS6.1AI score0.00417EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/11 3:15 p.m.•10 views

CVE-2024-51054

A Cross Site Scriptng XSS vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter...

4.8CVSS6.1AI score0.00399EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/11 12:00 a.m.•3 views

CVE-2024-50990: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scriptng XSS vulnerability was found in /omrs/user/search.php in PHPGurukul Online Marriage Registration System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter...

6.1CVSS6.5AI score0.00417EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/11 12:00 a.m.•13 views

PT-2024-16763 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Beauty Parlour Management System. The problem is related to an unknown function of the file /admin/search-invoices.ph...

9.8CVSS6AI score0.00525EPSS
SaveExploits1References12
Rows per page
Query Builder