ersinerenler/PHPGurukul-Teacher-Subject-Allocation-Management-System-1.0

ersinerenler/PHPGurukul-Teacher-Subject-Allocation-Management-System-1.0

Releases0

CVE History

CVEPublishedCVSS v3CVSS v2
7.5 HIGH

SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter.

4.9 MEDIUM

SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter.

4.8 MEDIUM

Cross Site Scripting (XSS) vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters.