Vulnerabilities > Phpgurukul
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-10-27 | CVE-2021-37806 | SQL Injection vulnerability in PHPgurukul Vehicle Parking Management System 1.0 An SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System affected version 1.0. | 5.9 |
| 2021-10-27 | CVE-2021-37807 | SQL Injection vulnerability in PHPgurukul Online Shopping Portal 3.1 An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /check_availability.php endpoint that serves as a checker whether a new user's email is already exist within the database. | 7.5 |
| 2021-10-27 | CVE-2021-37808 | SQL Injection vulnerability in PHPgurukul News Portal 3.1 SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the (1) category, (2) subcategory, (3) sucatdescription, and (4) username parameters, the server response is about (N) seconds delay respectively which mean it is vulnerable to MySQL Blind (Time Based). | 5.9 |
| 2021-10-13 | CVE-2021-42223 | Cross-site Scripting vulnerability in PHPgurukul Online DJ Booking Management System 1.0 Cross Site Scripting (XSS).vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php. | 6.1 |
| 2021-10-13 | CVE-2021-42224 | SQL Injection vulnerability in PHPgurukul Ifsc Code Finder 1.0 SQL Injection vulnerability exists in IFSC Code Finder Project 1.0 via the searchifsccode POST parameter in /search.php. | 9.8 |
| 2021-08-19 | CVE-2021-27822 | Cross-site Scripting vulnerability in PHPgurukul Vehicle Parking Management System 1.0 A persistent cross site scripting (XSS) vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field. | 4.8 |
| 2021-07-22 | CVE-2021-26762 | SQL Injection vulnerability in PHPgurukul Student Record System 4.0 SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php. | 8.8 |
| 2021-07-22 | CVE-2021-26764 | SQL Injection vulnerability in PHPgurukul Student Record System 4.0 SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php. | 8.8 |
| 2021-07-22 | CVE-2021-26765 | SQL Injection vulnerability in PHPgurukul Student Record System 4.0 SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php. | 9.8 |
| 2021-07-20 | CVE-2020-35427 | SQL Injection vulnerability in PHPgurukul Employee Record Management System 1.1 SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication. | 9.8 |