CVE-2024-30986

The phpgurukul Client Management System using PHP & MySQL version 1.1 is vulnerable to a Cross-Site Scripting (XSS) flaw in the /edit-services-details.php endpoint. The root cause is the improper neutralization of input during web page generation, specifically via the "price" and "sname" paramete...

CVE-2024-30990

The phpgurukul Client Management System version 1.1 is vulnerable to a SQL Injection flaw in the Invoices page. The root cause is the improper neutralization of special elements in the searchdata parameter, allowing an attacker to execute arbitrary SQL commands. This may lead to unauthorized data...

CVE-2024-30985

A SQL Injection vulnerability exists in the phpgurukul Client Management System version 1.1 (using PHP & MySQL). The flaw is located in the "B/W Dates Reports" page, where an attacker can execute arbitrary SQL commands by manipulating the "todate" and "fromdate" parameters. This vulnerability all...

CVE-2024-30988

The phpgurukul Client Management System (version 1.1) is vulnerable to a Cross-Site Scripting (XSS) vulnerability in the /search-invoices.php endpoint. The root cause is the improper neutralization of input during web page generation, specifically within the Search bar . This flaw allows an attac...

CVE-2024-30987

The phpgurukul Client Management System version 1.1 (using PHP & MySQL) contains a Cross-Site Scripting (XSS) vulnerability in the /bwdates-reports-ds.php API endpoint. The root cause is the improper neutralization of input during web page generation, specifically involving the fromdate and todat...

CVE-2024-30989

The phpgurukul Client Management System using PHP & MySQL version 1.1 is vulnerable to Cross-Site Scripting (XSS) in the /edit-client-details.php endpoint. The root cause is the improper neutralization of input during web page generation, specifically involving the "cname" , "comname" , "state" ,...

CVE-2024-51209

Anuj Kumar's Client Management System Version 1.2 (also identified as PHPGurukul Client Management System ) is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation, specifically within the search input field parameter . This ...

CVE-2024-48570

CVE-2024-48570 affects Client Management System 1.0. A SQL injection vulnerability exists in the Between Dates Reports parameter of the /admin/bwdates-reports-ds.php endpoint. The CVSS 3.1 base score is 7.5 (High) with Confidentiality impact High; no integrity/availability impact described. Conne...