CVE-2022-29007

Dairy Farm Shop Management System 1.0 is affected by multiple SQL injection flaws in the Admin panel’s username and password parameters, allowing authentication bypass. The Nuclei template and related reports describe exploitation that could enable data access, modification, and unauthorized admi...

CVE-2020-5307

CVE-2020-5307 concerns PHPGurukul Dairy Farm Shop Management System 1.0 and is documented to be vulnerable to SQL injection. The affected components include index.php (username parameter), add-category.php (CategoryCode and category), add-company.php (CompanyName), and add-product.php (ProductNam...

CVE-2024-46241

The PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the lack of effective filtering and escaping of user-supplied data within the pname parameter on the add_product.php and edit_product.php pages. An attacker can exploit this by in...

CVE-2024-0355

CVE-2024-0355 affects PHPGurukul Dairy Farm Shop Management System up to version 1.1. The issue is a SQL injection in an unknown function of add-category.php, triggered by manipulating the category parameter. Exploit has been disclosed publicly; VDB-250122 is the assigned identifier. NVD/CVSS dat...

CVE-2023-41593

CVE-2023-41593 is a reported cross-site scripting (XSS) vulnerability in the Dairy Farm Shop Management System Using PHP and MySQL v1.1. The issue allows attackers to execute arbitrary web scripts and HTML by injecting a crafted payload into the Category and Category Field parameters. The NVD met...

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is affected by SQL injection (CVE-2020-5307) as demonstrated by input vectors in index.php (username), add-category.php (category, CategoryCode), add-company.php (CompanyName), and add-product.php (ProductName, ProductPrice). Root cause: lack of va...

CVE-2025-5579

CVE-2025-5579 affects PHPGurukul Dairy Farm Shop Management System 1.3. the vulnerability is in the /search-product.php file, where manipulating the productname parameter leads to an SQL injection. Descriptions across multiple sources confirm remote exploitation possibilities and public disclosur...

CVE-2022-40943

Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via bwdate-report-ds.php. The root cause is unsafe input handling in that script, enabling manipulation of SQL queries. Exploitation status is not detailed in the provided sources; no confirmed in-the-wild exploit information. P...

CVE-2023-41594

CVE-2023-41594 applies to the Dairy Farm Shop Management System Using PHP and MySQL v1.1. The connected documents consistently describe multiple SQL injection vulnerabilities in the Login function, exploitable via the Username and Password parameters. The root cause is SQL injection in the login ...

CVE-2025-5577

CVE-2025-5577 affects PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability is a SQL injection in the /profile.php file, exploitable via the mobilenumber parameter. The issue is exploitable remotely and has been publicly disclosed. Several connected sources (NVD/CNVD/Red Hat/others)...

CVE-2025-5575

The CVE-2025-5575 entry affects PHPGurukul Dairy Farm Shop Management System v1.3, with a SQL injection in /add-product.php via the productname parameter. The vulnerability is exploitable remotely; exploitation details are publicly disclosed across multiple sources (e.g., NVD, CNVD, Red Hat). Con...

CVE-2025-5576

CVE-2025-5576 affects PHPGurukul Dairy Farm Shop Management System v1.3. The issue is a SQL injection in /bwdate-report-details.php caused by unsafely handling the fromdate/todate parameters. Exploitation can be remote, and the vulnerability is supported by multiple sources (CNVD/CNNVD, Red Hat, ...

CVE-2020-36062

The CVE-2020-36062 entry concerns Dairy Farm Shop Management System v1.0 with hardcoded credentials in the source code, enabling access to the control panel if compromised. Multiple connected sources corroborate a hardcoded credential vulnerability in a PHP/MySQL-based Dairy Farm Shop Management ...

CVE-2022-40944

CVE-2022-40944 affects Dairy Farm Shop Management System 1.0. Connected sources confirm an SQL Injection vulnerability in the sales-report-ds.php file, but no explicit fix version is stated in these documents. The vulnerability arises from unsafely handled input in that file; CVSS 3.1 metrics ind...

CVE-2025-5574

CVE-2025-5574 affects PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability is a SQL injection in the /add-company.php file, triggered by manipulating the companyname parameter. Multiple connected sources confirm remote exploitation and public disclosure of exploits. The core impact...

CVE-2025-5578

CVE-2025-5578 affects PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability is a SQL injection in the /sales-report-details.php file, triggered by manipulating the fromdate/todate parameters. It is exploitable remotely and has been disclosed publicly. Multiple connected sources corr...

CVE-2025-7590

PHPGurukul Dairy Farm Shop Management System v1.3 contains a SQL injection in edit-category.php caused by unsafely handling the categorycode parameter. The vulnerability is exploitable remotely and has publicly disclosed exploits. Several connected reports (CNVD/CNNVD, Red Hat, CVE listings, PT S...

CVE-2025-7592

The PHPGurukul Dairy Farm Shop Management System v1.3 contains a SQL injection in invoices.php (and receipts.php per PT-2025-29447) triggered by manipulating the del parameter. This enables remote exploitation and the exploit has been publicly disclosed. Affected functionality and lack of input v...

CVE-2025-51671

A SQL injection vulnerability exists in the PHPGurukul Dairy Farm Shop Management System 1.3 due to a lack of validation of externally entered SQL statements. Remote attackers can execute arbitrary SQL code by sending a POST request to the manage-categories.php file using the category and categor...

CVE-2025-7599

PHPGurukul Dairy Farm Shop Management System 1.3 is affected by a SQL injection in /invoice.php (parameter del). The root cause is unsanitized input leading to arbitrary SQL execution, enabling remote exploitation and potential data theft. Public exploit details exist. No patch/version fix inform...

CVE-2025-7591

CVE-2025-7591 affects PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability arises from an SQL injection in an unknown function in the file view-invoice.php , caused by manipulation of the parameter invid . It can be exploited remotely and publicly disclosed exploits exist. No remed...

CVE-2025-7589

PHPGurukul Dairy Farm Shop Management System 1.3 has a SQL injection vulnerability in edit-company.php via the companyname parameter. The issue allows remote exploitation and has publicly disclosed exploits. Affected component is unknown code within edit-company.php; exploitation can lead to unau...

CVE-2025-7588

The CVE-2025-7588 entry affects PHPGurukul Dairy Farm Shop Management System v1.3. A SQL injection vulnerability exists in the edit-product.php file via the productname parameter, with remote exploit viability and public disclosure. Impact is described as allowing data disclosure/inference and po...

CVE-2025-51672

A time-based blind SQL injection vulnerability exists in the PHPGurukul Dairy Farm Shop Management System 1.3 . The flaw is located in the manage-companies.php file and stems from a lack of validation of externally entered SQL statements. Remote attackers can execute arbitrary SQL code by providi...