Vulnerabilities > Phpgurukul > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-10-21 CVE-2022-42206 Cross-site Scripting vulnerability in PHPgurukul Hospital Management System 4.0
PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php.
network
low complexity
phpgurukul CWE-79
5.4
2022-09-30 CVE-2022-35155 Cross-site Scripting vulnerability in PHPgurukul BUS Pass Management System 1.0
Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter.
network
low complexity
phpgurukul CWE-79
6.1
2022-08-19 CVE-2020-23466 Cross-site Scripting vulnerability in PHPgurukul Online Marriage Registration System 1.0
Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field.
network
low complexity
phpgurukul CWE-79
5.4
2022-07-05 CVE-2022-33075 Cross-site Scripting vulnerability in PHPgurukul ZOO Management System 1.0
A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors.
network
low complexity
phpgurukul CWE-79
5.4
2022-06-29 CVE-2022-31897 Cross-site Scripting vulnerability in PHPgurukul ZOO Management System 1.0
SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?msg=.
network
low complexity
phpgurukul CWE-79
6.1
2022-06-16 CVE-2022-31914 Cross-site Scripting vulnerability in PHPgurukul ZOO Management System 1.0
Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24.
network
low complexity
phpgurukul CWE-79
5.4
2022-06-14 CVE-2022-30930 Cross-Site Request Forgery (CSRF) vulnerability in PHPgurukul Tourism Management System 3.2
Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery (CSRF).
network
low complexity
phpgurukul CWE-352
4.3
2022-05-26 CVE-2021-4232 Cross-site Scripting vulnerability in PHPgurukul ZOO Management System 1.0
A vulnerability classified as problematic has been found in Zoo Management System 1.0.
network
low complexity
phpgurukul CWE-79
6.1
2022-05-23 CVE-2022-29004 Cross-site Scripting vulnerability in PHPgurukul E-Diary Management System 1.0
Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php.
network
low complexity
phpgurukul CWE-79
6.1
2022-05-23 CVE-2022-29005 Cross-site Scripting vulnerability in PHPgurukul Online Birth Certificate System 1.2
Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters.
network
low complexity
phpgurukul CWE-79
6.1