Vulnerabilities > Phpgurukul > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-20 | CVE-2024-10162 | SQL Injection vulnerability in PHPgurukul Boat Booking System 1.0 A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. | 7.2 |
| 2024-10-20 | CVE-2024-10159 | SQL Injection vulnerability in PHPgurukul Boat Booking System 1.0 A vulnerability classified as critical was found in PHPGurukul Boat Booking System 1.0. | 7.2 |
| 2024-10-20 | CVE-2024-10160 | SQL Injection vulnerability in PHPgurukul Boat Booking System 1.0 A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. | 8.8 |
| 2024-10-19 | CVE-2024-10158 | Session Fixation vulnerability in PHPgurukul Boat Booking System 1.0 A vulnerability classified as problematic has been found in PHPGurukul Boat Booking System 1.0. | 8.8 |
| 2024-09-05 | CVE-2024-8463 | Unrestricted Upload of File with Dangerous Type vulnerability in PHPgurukul JOB Portal 1.0 File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell. | 8.8 |
| 2024-09-05 | CVE-2024-8464 | SQL Injection vulnerability in PHPgurukul JOB Portal 1.0 SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information stored in it. | 7.5 |
| 2024-09-05 | CVE-2024-8465 | SQL Injection vulnerability in PHPgurukul JOB Portal 1.0 SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it. | 7.5 |
| 2024-09-05 | CVE-2024-8466 | SQL Injection vulnerability in PHPgurukul JOB Portal 1.0 SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored in it. | 7.5 |
| 2024-09-05 | CVE-2024-8467 | SQL Injection vulnerability in PHPgurukul JOB Portal 1.0 SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it. | 7.5 |
| 2024-09-05 | CVE-2024-8468 | SQL Injection vulnerability in PHPgurukul JOB Portal 1.0 SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it. | 7.5 |