vkcyberexpert/CVE-Writeup

Releases0

Stars1

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-50989 ↗	Nov 11, 2024Monday, 11 November 2024, 15:15	9.8 CRITICAL	—
A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL commands via the "searchdata " parameter.
CVE-2024-50990 ↗	Nov 11, 2024Monday, 11 November 2024, 15:15	6.1 MEDIUM	—
A Reflected Cross Site Scriptng (XSS) vulnerability was found in /omrs/user/search.php in PHPGurukul Online Marriage Registration System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter.
CVE-2024-50991 ↗	Nov 11, 2024Monday, 11 November 2024, 15:15	4.8 MEDIUM	—
A Cross Site Scripting (XSS) vulnerability was found in /ums-sp/admin/registered-users.php in PHPGurukul User Management System v1.0, which allows remote attackers to execute arbitrary code via the "fname" POST request parameter
CVE-2024-51054 ↗	Nov 11, 2024Monday, 11 November 2024, 15:15	4.8 MEDIUM	—
A Cross Site Scriptng (XSS) vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter.
CVE-2024-48744 ↗	Oct 16, 2024Wednesday, 16 October 2024, 15:15	6.1 MEDIUM	—
A Reflected Cross Site Scripting (XSS) vulnerability was found in /trms/listed- teachers.php in PHPGurukul Teachers Record Management System v2.1, which allows remote attackers to execute arbitrary code via "searchinput" POST request parameter.