17 matches found
CVE-2025-4072
CVE-2025-4072 affects PHPGurukul Online Nurse Hiring System 1.0. The vulnerability arises from improper handling/validation in the file /admin/edit-nurse.php, enabling SQL injection. Affected component is the admin edit-nurse workflow; attack may be remotely initiated and could disclose/alter dat...
CVE-2025-1583
CVE-2025-1583 is a SQL injection vulnerability affecting PHPGurukul Online Nurse Hiring System 1.0, located in /admin/search-report-details.php where the searchinput parameter is manipulated. The issue enables remote exploitation, and multiple sources report that the exploit has been disclosed pu...
CVE-2025-1581
CVE-2025-1581 affects PHPGurukul Online Nurse Hiring System 1.0. The vulnerability is a SQL injection in the unknown functionality of the file /book-nurse.php?bookid=1, caused by improper handling of the contactname parameter. It can be exploited remotely and the exploit has been disclosed public...
CVE-2025-1588
The CVE-2025-1588 entry affects PHPGurukul Online Nurse Hiring System 1.0, targeting unknown code in /admin/manage-nurse.php. The vulnerability arises from manipulating the profilepic argument to induce path traversal (../filedir), with remote initiation and public disclosure of the exploit. Conn...
CVE-2025-1582
CVE-2025-1582 affects PHPGurukul Online Nurse Hiring System 1.0. The vulnerability is a SQL injection in the unknown-functionality of the file /admin/all-request.php caused by manipulating the viewid parameter. Exploitation may be remote and the exploit has been publicly disclosed. Multiple conne...
CVE-2024-55099
CVE-2024-55099 affects the phpgurukul Online Nurse Hiring System v1.0, where an SQL injection in the /admin/index.php endpoint via the username parameter allows remote attackers to execute arbitrary SQL and gain unauthorized database access. The vulnerability is caused by insufficient input valid...
CVE-2024-55104
CVE-2024-55104 affects Online Nurse Hiring System v1.0. The vulnerability is a set of SQL injection flaws in the /admin/add-nurse.php component, exploitable via the gender and emailid parameters. The CVSSv3.1 metrics indicate a High severity (7.2) with network attack vector, low attack complexity...
CVE-2023-37683
The CVE-2023-37683 entry concerns Online Nurse Hiring System v1.0 with a cross-site scripting (XSS) vulnerability in the Admin Profile Page. The available connected documents confirm the affected product and the vulnerability class but do not provide a vendor-specific patch version. Some sources ...
CVE-2025-4080
PHPGurukul Online Nurse Hiring System 1.0 has a SQL injection vulnerability in /admin/view-request.php via the viewid parameter. The issue is exploitable remotely and classified as critical; exploitation details are publicly disclosed. The connected documents do not provide a confirmed patch vers...
CVE-2024-54842
CVE-2024-54842 is a SQL injection vulnerability in phpgurukul Online Nurse Hiring System v1.0, exploitable via the mobileno parameter at /admin/password-recovery.php. CVSS v3.1 base score 9.8 (CRITICAL), with high impact to confidentiality, integrity, and availability. Documents consistently desc...
CVE-2024-55100
The CVE-2024-55100 entry refers to a stored cross-site scripting (XSS) vulnerability in Online Nurse Hiring System v1.0, specifically affecting the /admin/profile.php component. The fullname parameter can be manipulated to inject arbitrary web scripts/HTML. According to the provided metrics, the ...
CVE-2024-55103
CVE-2024-55103 affects Online Nurse Hiring System v1.0. The vulnerability is a SQL injection in the /admin/profile.php component via the fullname parameter. According to the metadata, the issue has a CVSS v3.1 base score of 7.2 ( HIGH ) with NETWORK attack vector, LOW attack complexity, PRIVILEGE...
CVE-2025-5230
CVE-2025-5230 – PHPGurukul Online Nurse Hiring System 1.0 is affected by an SQL injection in the file /admin/bwdates-report-details.php caused by manipulating the fromdate/todate parameters. The vulnerability can be exploited remotely and the exploit has been publicly disclosed. Connected sources...
CVE-2023-37684
This CVE refers to an XSS vulnerability in Online Nurse Hiring System v1.0, specifically in the Search Report Details page of the Admin portal. The issue is identified as a cross-site scripting flaw affecting the Admin portal’s Search Report Details component; the root cause is not explicitly det...
CVE-2023-37687
CVE-2023-37687 affects Online Nurse Hiring System v1.0. The vulnerability is a cross-site scripting (XSS) issue in the Admin portal, specifically in the View Request of Nurse Page. CVSSv3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, base score 7.2 (HIGH). The root cause is an XSS flaw ...
CVE-2023-37685
CVE-2023-37685 affects Online Nurse Hiring System v1.0. A cross-site scripting (XSS) vulnerability was identified in the Search Report Page of the Admin portal. The connected documents do not provide the root cause details, affected files/paths beyond the Admin portal Search Report Page, or versi...
CVE-2023-37686
CVE-2023-37686 pertains to Online Nurse Hiring System v1.0, with a cross-site scripting (XSS) vulnerability on the Add Nurse Page of the Admin portal. The CVSS v3.1 base score is 4.8 (Medium): AV:N, AC:L, PR:H, UI:R, S:C, C:L, I:L, A:N. The connected documents confirm the issue is an XSS, but do ...