Phpgurukul: Security Vulnerabilities
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
CVSS Score
7.5
EPSS Score
0.366
Published
2021-06-22
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
CVSS Score
7.5
EPSS Score
0.027
Published
2021-06-22
COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the "Admin name" parameter.
CVSS Score
4.8
EPSS Score
0.002
Published
2021-05-26
COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel.
CVSS Score
9.8
EPSS Score
0.025
Published
2021-05-26
Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "sername" parameter.
CVSS Score
4.8
EPSS Score
0.003
Published
2021-04-15
SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into the "sername" parameter.
CVSS Score
6.5
EPSS Score
0.011
Published
2021-04-15
PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php.
CVSS Score
9.8
EPSS Score
0.008
Published
2021-02-17
Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unauthenticated attacker to leak sensitive information and perform code execution attacks.
CVSS Score
9.8
EPSS Score
0.16
Published
2021-02-15
Online Marriage Registration System 1.0 is affected by stored cross-site scripting (XSS) vulnerabilities in multiple parameters.
CVSS Score
5.4
EPSS Score
0.002
Published
2021-02-08
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field.
CVSS Score
6.1
EPSS Score
0.002
Published
2021-01-29