phpgurukul vulnerabilities and exploits

(subscribe to this query)

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows malicious users to access all data of users, delete the users, add and manage Blood Group, and Submit Report.

Phpgurukul Blood Donor Management System Project Phpgurukul Blood Donor Management System 1.0

1 Github repository

A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/apply_vacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack...

Phpgurukul Zoo Management System -

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an malicious user to retrieve the session details of an authenticated user through multiple parameters in /jobportal/index.php.

Phpgurukul Job Portal 1.0

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an malicious user to retrieve the session details of an authenticated user through user_email parameter in /jobportal/admin/login....

Phpgurukul Job Portal 1.0

File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell.

Phpgurukul Job Portal 1.0

SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information stored in it.

Phpgurukul Job Portal 1.0

SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it.

Phpgurukul Job Portal 1.0

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored in it.

Phpgurukul Job Portal 1.0

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it.

Phpgurukul Job Portal 1.0

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it.

Phpgurukul Job Portal 1.0

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook