CVE-2025-4072

CVE-2025-4072 affects PHPGurukul Online Nurse Hiring System 1.0. The vulnerability arises from improper handling/validation in the file /admin/edit-nurse.php, enabling SQL injection. Affected component is the admin edit-nurse workflow; attack may be remotely initiated and could disclose/alter dat...

CVE-2025-1583

CVE-2025-1583 is a SQL injection vulnerability affecting PHPGurukul Online Nurse Hiring System 1.0, located in /admin/search-report-details.php where the searchinput parameter is manipulated. The issue enables remote exploitation, and multiple sources report that the exploit has been disclosed pu...

CVE-2025-1581

CVE-2025-1581 affects PHPGurukul Online Nurse Hiring System 1.0. The vulnerability is a SQL injection in the unknown functionality of the file /book-nurse.php?bookid=1, caused by improper handling of the contactname parameter. It can be exploited remotely and the exploit has been disclosed public...

CVE-2025-1588

The CVE-2025-1588 entry affects PHPGurukul Online Nurse Hiring System 1.0, targeting unknown code in /admin/manage-nurse.php. The vulnerability arises from manipulating the profilepic argument to induce path traversal (../filedir), with remote initiation and public disclosure of the exploit. Conn...

CVE-2025-1582

CVE-2025-1582 affects PHPGurukul Online Nurse Hiring System 1.0. The vulnerability is a SQL injection in the unknown-functionality of the file /admin/all-request.php caused by manipulating the viewid parameter. Exploitation may be remote and the exploit has been publicly disclosed. Multiple conne...

CVE-2024-55099

The phpgurukul Online Nurse Hiring System v1.0 contains a SQL Injection vulnerability in the /admin/index.php endpoint. The root cause is insufficient input validation and sanitization of the username parameter, which allows remote attackers to execute arbitrary SQL commands and gain unauthorized...

CVE-2023-37683

The CVE-2023-37683 entry concerns Online Nurse Hiring System v1.0 with a cross-site scripting (XSS) vulnerability in the Admin Profile Page. The available connected documents confirm the affected product and the vulnerability class but do not provide a vendor-specific patch version. Some sources ...

CVE-2024-55104

Online Nurse Hiring System v1.0 is affected by multiple SQL injection vulnerabilities located in the /admin/add-nurse.php component. The root cause is the improper neutralization of special elements used in SQL commands, specifically through the gender and emailid parameters. This vulnerability c...

CVE-2025-4080

PHPGurukul Online Nurse Hiring System 1.0 has a SQL injection vulnerability in /admin/view-request.php via the viewid parameter. The issue is exploitable remotely and classified as critical; exploitation details are publicly disclosed. The connected documents do not provide a confirmed patch vers...

CVE-2024-54842

A SQL injection vulnerability exists in phpgurukul Online Nurse Hiring System v1.0 . The flaw is located in the /admin/password-recovery.php endpoint and is triggered via the mobileno parameter. This vulnerability allows for the potential exploitation of the underlying system. As a temporary work...

CVE-2024-55103

The Online Nurse Hiring System v1.0 is vulnerable to a SQL injection flaw in the /admin/profile.php component via the fullname parameter. This vulnerability allows for potential exploitation of the underlying database. As no patched version is currently available, it is recommended to disable acc...

CVE-2024-55100

The Online Nurse Hiring System v1.0 is affected by a stored cross-site scripting (XSS) vulnerability within the /admin/profile.php component. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the fullname parameter. Exploitation of this flaw allows for the ...

CVE-2023-37687

CVE-2023-37687 affects Online Nurse Hiring System v1.0. The vulnerability is a cross-site scripting (XSS) issue in the Admin portal, specifically in the View Request of Nurse Page. CVSSv3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, base score 7.2 (HIGH). The root cause is an XSS flaw ...

CVE-2025-5230

CVE-2025-5230 – PHPGurukul Online Nurse Hiring System 1.0 is affected by an SQL injection in the file /admin/bwdates-report-details.php caused by manipulating the fromdate/todate parameters. The vulnerability can be exploited remotely and the exploit has been publicly disclosed. Connected sources...

CVE-2023-37684

This CVE refers to an XSS vulnerability in Online Nurse Hiring System v1.0, specifically in the Search Report Details page of the Admin portal. The issue is identified as a cross-site scripting flaw affecting the Admin portal’s Search Report Details component; the root cause is not explicitly det...

CVE-2023-37685

CVE-2023-37685 affects Online Nurse Hiring System v1.0. A cross-site scripting (XSS) vulnerability was identified in the Search Report Page of the Admin portal. The connected documents do not provide the root cause details, affected files/paths beyond the Admin portal Search Report Page, or versi...

CVE-2023-37686

CVE-2023-37686 pertains to Online Nurse Hiring System v1.0, with a cross-site scripting (XSS) vulnerability on the Add Nurse Page of the Admin portal. The CVSS v3.1 base score is 4.8 (Medium): AV:N, AC:L, PR:H, UI:R, S:C, C:L, I:L, A:N. The connected documents confirm the issue is an XSS, but do ...