Vulnerabilities > Phpgurukul

DATE CVE VULNERABILITY TITLE RISK
2024-09-29 CVE-2024-9326 SQL Injection vulnerability in PHPgurukul Online Shopping Portal 2.0
A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0.
network
low complexity
phpgurukul CWE-89
critical
9.8
2024-09-05 CVE-2024-8463 Unrestricted Upload of File with Dangerous Type vulnerability in PHPgurukul JOB Portal 1.0
File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell.
network
low complexity
phpgurukul CWE-434
8.8
2024-09-05 CVE-2024-8464 SQL Injection vulnerability in PHPgurukul JOB Portal 1.0
SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information stored in it.
network
low complexity
phpgurukul CWE-89
7.5
2024-09-05 CVE-2024-8465 SQL Injection vulnerability in PHPgurukul JOB Portal 1.0
SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it.
network
low complexity
phpgurukul CWE-89
7.5
2024-09-05 CVE-2024-8466 SQL Injection vulnerability in PHPgurukul JOB Portal 1.0
SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored in it.
network
low complexity
phpgurukul CWE-89
7.5
2024-09-05 CVE-2024-8467 SQL Injection vulnerability in PHPgurukul JOB Portal 1.0
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it.
network
low complexity
phpgurukul CWE-89
7.5
2024-09-05 CVE-2024-8468 SQL Injection vulnerability in PHPgurukul JOB Portal 1.0
SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it.
network
low complexity
phpgurukul CWE-89
7.5
2024-09-05 CVE-2024-8469 SQL Injection vulnerability in PHPgurukul JOB Portal 1.0
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it.
network
low complexity
phpgurukul CWE-89
7.5
2024-09-05 CVE-2024-8470 SQL Injection vulnerability in PHPgurukul JOB Portal 1.0
SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it.
network
low complexity
phpgurukul CWE-89
7.5
2024-09-05 CVE-2024-8471 Cross-site Scripting vulnerability in PHPgurukul JOB Portal 1.0
Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted.
network
low complexity
phpgurukul CWE-79
6.1