sbksibi/CVEs

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-53481 ↗	Dec 10, 2024Tuesday, 10 December 2024, 20:15	6.1 MEDIUM	—
A Cross Site Scripting (XSS) vulnerability in the profile.php of PHPGurukul Beauty Parlour Management System v1.1 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "Firstname" and "Last name" parameters.
CVE-2024-53480 ↗	Dec 10, 2024Tuesday, 10 December 2024, 20:15	9.8 CRITICAL	—
Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in `login.php` via the `emailcont` parameter.