Phpgurukul
Page 12 of 12 — Phpgurukul CVEs from a corpus of 1121, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-35745 | High | 8.8 | 2021-01-07 | PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, docto… |
CVE-2020-35151 | High | 8.8 | 2020-12-21 | The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to Time Based Sql Injection. |
CVE-2020-24723 | Medium | 4.8 | 2020-11-18 | Cross Site Scripting (XSS) vulnerability in the Registration page of the admin panel in PHPGurukul User Registration & Login and User Management System With ad… |
CVE-2020-28136 | High | 8.8 | 2020-11-17 | An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-packag… |
CVE-2020-25952 | Critical | 9.8 | 2020-11-16 | SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrar… |
CVE-2020-25271 | Medium | 5.4 | 2020-10-08 | PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.p… |
CVE-2020-25270 | Medium | 5.4 | 2020-10-08 | PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City. |
CVE-2020-25487 | High | 7.8 | 2020-09-22 | PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection via zms/animal-detail.php. |
CVE-2020-23936 | Critical | 9.8 | 2020-08-20 | PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)". |
CVE-2020-12429 | Critical | 9.8 | 2020-04-28 | Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages… |
CVE-2020-10225 | Critical | 9.8 | 2020-03-08 | An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an… |
CVE-2020-10224 | Critical | 9.8 | 2020-03-08 | An unauthenticated file upload vulnerability has been identified in admin_add.php in PHPGurukul Online Book Store 1.0. The vulnerability could be exploited by… |
CVE-2020-10107 | Medium | 5.4 | 2020-03-05 | PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php. |
CVE-2020-10106 | Critical | 9.8 | 2020-03-05 | PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL inject… |
CVE-2020-5509 | High | 7.2 | 2020-01-14 | PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image. |
CVE-2020-5193 | Medium | 6.1 | 2020-01-14 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter. |
CVE-2020-5308 | Medium | 6.1 | 2020-01-09 | PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the Com… |
CVE-2020-5510 | Critical | 9.8 | 2020-01-08 | PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file. |
CVE-2020-5307 | Critical | 9.8 | 2020-01-07 | PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and Categ… |
CVE-2020-5192 | High | 8.8 | 2020-01-06 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user in… |
CVE-2020-5191 | Medium | 6.1 | 2020-01-06 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities. |