Phpgurukul Client Management System
8 CVEs affecting Phpgurukul Client Management System. Latest disclosed: 2024-11-20. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-30990 | Critical | 9.8 | 2024-04-17 | SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL comman… |
CVE-2024-30985 | Critical | 9.8 | 2024-04-17 | SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL c… |
CVE-2024-48570 | High | 7.5 | 2024-10-22 | Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php. |
CVE-2024-30988 | Medium | 6.8 | 2024-04-17 | Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary c… |
CVE-2024-30987 | Medium | 6.8 | 2024-04-17 | Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrar… |
CVE-2024-30986 | Medium | 6.5 | 2024-04-17 | Cross Site Scripting vulnerability in /edit-services-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbit… |
CVE-2024-51209 | Medium | 5.4 | 2024-11-20 | Cross-Site Scripting (XSS) vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to inject arbitrary web script or HTML vi… |
CVE-2024-30989 | Medium | 5.4 | 2024-04-17 | Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitra… |