253 matches found
CVE-2024-53604
A SQL Injection vulnerability was found in /covid-tms/checkavailability.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the mobnumber POST request parameter...
PHPGurukul COVID 19 Testing Management System 跨站脚本漏洞
PHPGurukul COVID 19 Testing Management System is a COVID 19 testing management system from PHPGurukul Inc. A cross-site scripting vulnerability exists in PHPGurukul COVID 19 Testing Management System v1.0, which stems from a Reflective Cross-Site Scripting XSS vulnerability that allows remote...
CVE-2024-53603
A SQL Injection vulnerability was found in /covid-tms/password-recovery.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter...
CVE-2024-53603
The PHPGurukul COVID 19 Testing Management System v1.0 is susceptible to a SQL Injection vulnerability located in the /covid-tms/password-recovery.php file. This flaw arises from improper neutralization of special elements in an SQL command, specifically via the contactno POST request parameter. ...
CVE-2024-53604
A SQL Injection vulnerability exists in the /covid-tms/check_availability.php component of PHPGurukul COVID 19 Testing Management System v1.0 . This flaw allows remote attackers to execute arbitrary code by exploiting the mobnumber POST request parameter. The vulnerability has a CRITICAL CVSS v3....
CVE-2024-53635
A Reflected Cross Site Scripting XSS vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter...
CVE-2024-53603: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /covid-tms/password-recovery.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter...
CVE-2024-53604: Improper Control of Generation of Code
A SQL Injection vulnerability was found in /covid-tms/checkavailability.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the mobnumber POST request parameter...
PT-2024-35788
Name of the Vulnerable Software and Affected Versions PHPGurukul COVID 19 Testing Management System version 1.0 Description A SQL Injection issue was found in the /covid-tms/check availability.php file, allowing remote attackers to execute arbitrary code via the mobnumber POST request parameter...
PT-2024-35787
Name of the Vulnerable Software and Affected Versions PHPGurukul COVID 19 Testing Management System version 1.0 Description A SQL Injection issue was found in the /covid-tms/password-recovery.php file, allowing remote attackers to execute arbitrary code via the contactno POST request parameter...
CVE-2024-53635: Improper Neutralization of Input During Web Page Generation
A Reflected Cross Site Scripting XSS vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter...
Nipah Virus Testing Management System 1.0 Insecure Settings
==================================================================================================================================== | Title : Nipah virus NiV – Testing Management System 1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozill...
Nipah Virus Testing Management System 1.0 SQL Injection
==================================================================================================================================== | Title : Nipah virus NiV – Testing Management System 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...
COVID19 Testing Management System 1.0 Insecure Settings
==================================================================================================================================== | Title : COVID19 - Testing Management System 1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefo...
Nipah Virus Testing Management System 1.0 PHP Code Injection
============================================================================================================================================= | Title : Nipah virus NiV – Testing Management System 1.0 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browse...
The vulnerability of the password-recovery.php script of the testing management system allows a hacker to execute arbitrary SQL queries against the database.
The vulnerability of the password-recovery.php script of the testing management system related to the PHPGurukul Nipah Virus Testing Management System lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL...
CVE-2023-7099
A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiate...
Sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiate...
Nipah virus Testing Management System SQL Injection Vulnerability
Nipah Virus Testing Management System is an online virus diagnostic platform. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Nipah Virus Testing Management System, which stems from some unknown processing in bwdates-report-result.php that leads to SQL injection via the...
CVE-2023-7099: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiate...