Vulnerabilities > Phpgurukul > High

DATE CVE VULNERABILITY TITLE RISK
2023-11-14 CVE-2023-46024 SQL Injection vulnerability in PHPgurukul Teacher Subject Allocation Management System 1.0
SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter.
network
low complexity
phpgurukul CWE-89
7.5
2023-11-10 CVE-2023-6076 Unspecified vulnerability in PHPgurukul Restaurant Table Booking System 1.0
A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0.
network
low complexity
phpgurukul
7.5
2023-09-08 CVE-2023-41594 SQL Injection vulnerability in PHPgurukul Dairy Farm Shop Management System 1.1
Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters.
network
low complexity
phpgurukul CWE-89
7.5
2023-08-18 CVE-2023-38890 SQL Injection vulnerability in PHPgurukul Online Shopping Portal 3.1
Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation.
network
low complexity
phpgurukul CWE-89
8.8
2023-08-08 CVE-2023-37687 SQL Injection vulnerability in PHPgurukul Online Nurse Hiring System 1.0
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the View Request of Nurse Page in the Admin portal.
network
low complexity
phpgurukul CWE-89
7.2
2023-08-01 CVE-2023-37772 SQL Injection vulnerability in PHPgurukul Online Shopping Portal 3.1
Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php.
network
low complexity
phpgurukul CWE-89
8.8
2023-07-28 CVE-2023-31932 SQL Injection vulnerability in PHPgurukul Rail Pass Management System 1.0
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file.
network
low complexity
phpgurukul CWE-89
7.2
2023-07-28 CVE-2023-31933 SQL Injection vulnerability in PHPgurukul Rail Pass Management System 1.0
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file.
network
low complexity
phpgurukul CWE-89
7.2
2023-07-28 CVE-2023-31936 SQL Injection vulnerability in PHPgurukul Rail Pass Management System 1.0
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file.
network
low complexity
phpgurukul CWE-89
7.2
2023-07-28 CVE-2023-31937 SQL Injection vulnerability in PHPgurukul Rail Pass Management System 1.0
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file.
network
low complexity
phpgurukul CWE-89
7.2