Vulnerabilities > Phpgurukul > Teacher Subject Allocation Management System > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-12-10 CVE-2023-6653 Cross-Site Request Forgery (CSRF) vulnerability in PHPgurukul Teacher Subject Allocation Management System 1.0
A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0.
network
low complexity
phpgurukul CWE-352
4.3
2023-12-10 CVE-2023-6649 Cross-site Scripting vulnerability in PHPgurukul Teacher Subject Allocation Management System 1.0
A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as problematic.
network
low complexity
phpgurukul CWE-79
6.1
2023-11-14 CVE-2023-46025 SQL Injection vulnerability in PHPgurukul Teacher Subject Allocation Management System 1.0
SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter.
network
low complexity
phpgurukul CWE-89
4.9
2023-11-14 CVE-2023-46026 Cross-site Scripting vulnerability in PHPgurukul Teacher Subject Allocation Management System 1.0
Cross Site Scripting (XSS) vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters.
network
low complexity
phpgurukul CWE-79
4.8