Buckdray/vulnerability-research

Releases0

Hunting bugs for fun

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-53412 ↗	Apr 15, 2026Wednesday, 15 April 2026, 15:16	8.4 HIGH	—
Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection of malicious payloads into the Port field
CVE-2024-51222 ↗	Mar 23, 2026Monday, 23 March 2026, 16:16	4.8 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.
CVE-2024-51223 ↗	Mar 23, 2026Monday, 23 March 2026, 16:16	4.8 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Mobile Number parameter.
CVE-2024-51224 ↗	Mar 23, 2026Monday, 23 March 2026, 16:16	4.8 MEDIUM	—
Multiple cross-site scripting (XSS) vulnerabilities in the component /admin/edit-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum and enginenumber parameters.
CVE-2024-51225 ↗	Mar 23, 2026Monday, 23 March 2026, 16:16	4.8 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in the component /admin/add-brand.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the brandname parameter.
CVE-2024-51226 ↗	Mar 23, 2026Monday, 23 March 2026, 16:16	6.1 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in the component /admin/search-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Search parameter.