Vulnerabilities > Phpgurukul > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-01-08 CVE-2020-5510 SQL Injection vulnerability in PHPgurukul Hostel Management System 2.0
PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file.
network
low complexity
phpgurukul CWE-89
critical
9.8
2020-01-07 CVE-2020-5307 SQL Injection vulnerability in PHPgurukul Dairy Farm Shop Management System 1.0
PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName and ProductPrice parameters in add-product.php.
network
low complexity
phpgurukul CWE-89
critical
9.8