Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
176 results · page 2 of 4
Sep 14, 2023Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::display().CVE-2023-39642 · Other software · Carts.guru · reported by MITRECritical 9.8
Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::display().
- Product
- Cartsguru
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaddons.prestashop.comsecurity.friendsofpresta.org
Sep 11, 2023Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow attackers to execute arbitrary web scripCVE-2023-41593 · Websites & servers · Phpgurukul · reported by MITREMedium 5.4
Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow attackers to execute arbitrary web scripts and HTML via a crafted payload injected into the Category and Category Field parameters.
- Product
- Dairy Farm Shop Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comportswigger.net
Sep 8, 2023Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web CVE-2023-41575 · Websites & servers · Phpgurukul · reported by MITREMedium 5.4
Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full Name, Message, or Address parameters.
- Product
- Blood Bank & Donor Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 7, 2023Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields.CVE-2023-41615 · Websites & servers · Phpgurukul · reported by MITRECritical 9.8
Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields.
- Product
- ZOO Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmedium.comphpgurukul.com
Sep 7, 2023Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the UsernaCVE-2023-41594 · Websites & servers · Phpgurukul · reported by MITREHigh 7.5
Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters.
- Product
- Dairy Farm Shop Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comportswigger.net
Aug 18, 2023Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and poteCVE-2023-38890 · Websites & servers · Phpgurukul · reported by MITREHigh 8.8
Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.
- Product
- Online Shopping Portal
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comtagmachan.com
Aug 8, 2023Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Search Maid page.CVE-2023-37690 · Websites & servers · Phpgurukul · reported by MITREMedium 4.8
Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Search Maid page.
- Product
- Maid Hiring Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Aug 8, 2023Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page.CVE-2023-37689 · Websites & servers · Phpgurukul · reported by MITREMedium 4.8
Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page.
- Product
- Maid Hiring Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Aug 8, 2023Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Admin page.CVE-2023-37688 · Websites & servers · Phpgurukul · reported by MITREMedium 4.8
Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Admin page.
- Product
- Maid Hiring Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Aug 8, 2023Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the View Request of Nurse Page in the Admin portal.CVE-2023-37687 · Websites & servers · Phpgurukul · reported by MITREHigh 7.2
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the View Request of Nurse Page in the Admin portal.
- Product
- Online Nurse Hiring System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2023Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Nurse Page in the Admin portal.CVE-2023-37686 · Websites & servers · Phpgurukul · reported by MITREMedium 4.8
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Nurse Page in the Admin portal.
- Product
- Online Nurse Hiring System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Aug 8, 2023Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin portal.CVE-2023-37685 · Websites & servers · Phpgurukul · reported by MITREMedium 4.8
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin portal.
- Product
- Online Nurse Hiring System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Aug 8, 2023Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Details of the Admin portal.CVE-2023-37684 · Websites & servers · Phpgurukul · reported by MITREMedium 4.8
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Details of the Admin portal.
- Product
- Online Nurse Hiring System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Aug 8, 2023Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Profile Page of the Admin.CVE-2023-37683 · Websites & servers · Phpgurukul · reported by MITREMedium 4.8
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Profile Page of the Admin.
- Product
- Online Nurse Hiring System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 31, 2023Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php.CVE-2023-37772 · Websites & servers · Phpgurukul · reported by MITREHigh 8.8
Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php.
- Product
- Online Shopping Portal
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordphpgurukul.comgithub.com
Jul 31, 2023Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php.CVE-2023-37771 · Websites & servers · Phpgurukul · reported by MITRECritical 9.8
Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php.
- Product
- ART Gallery Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 28, 2023Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-cCVE-2023-31937 · Websites & servers · Phpgurukul · reported by MITREHigh 7.2
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file.
- Product
- Rail Pass Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 28, 2023Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pCVE-2023-31936 · Websites & servers · Phpgurukul · reported by MITREHigh 7.2
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file.
- Product
- Rail Pass Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 28, 2023Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter oCVE-2023-31935 · Websites & servers · Phpgurukul · reported by MITREMedium 4.8
Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php.
- Product
- Rail Pass Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 28, 2023Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parametCVE-2023-31934 · Websites & servers · Phpgurukul · reported by MITREMedium 4.8
Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php.
- Product
- Rail Pass Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 28, 2023Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pCVE-2023-31933 · Websites & servers · Phpgurukul · reported by MITREHigh 7.2
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file.
- Product
- Rail Pass Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 28, 2023Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-eCVE-2023-31932 · Websites & servers · Phpgurukul · reported by MITREHigh 7.2
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file.
- Product
- Rail Pass Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 13, 2023A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloadCVE-2023-37746 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component.
- Product
- Maid Hiring Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordphpgurukul.comphpgurukul.com
Jul 13, 2023A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloadCVE-2023-37745 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Description of the /admin/aboutus.php component.
- Product
- Maid Hiring Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordphpgurukul.comphpgurukul.com
Jul 13, 2023Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-booking-request.php.CVE-2023-37744 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-booking-request.php.
- Product
- Maid Hiring Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordphpgurukul.comphpgurukul.com
Jul 13, 2023A cross-site scripting (XSS) vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payCVE-2023-37743 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
A cross-site scripting (XSS) vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box.
- Product
- Teacher Subject Allocation System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordphpgurukul.comphpgurukul.com
Jul 10, 2023Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search bookiCVE-2023-36939 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field.
- Product
- Hostel Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmedium.compacketstormsecurity.com
Jul 10, 2023Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name, GuaCVE-2023-36375 · Websites & servers · Phpgurukul · reported by MITREMedium 5.4
Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name, Guardian relation, complimentary address, city, permanent address, and city parameters in the Book Hostel & Room Details page.
- Product
- Hostel Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmedium.compacketstormsecurity.com
Jul 10, 2023Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injecCVE-2023-36376 · Websites & servers · Phpgurukul · reported by MITREMedium 4.8
Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the add course section.
- Product
- Hostel Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmedium.compacketstormsecurity.com
Jun 28, 2023A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local attacker to execute aCVE-2023-34648 · Other software · User Registration & Login And User Management System With Admin Panel Project · reported by MITREMedium 6.1
A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the signup.php.
- Product
- User Registration & Login And User Management System With Admin Panel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 28, 2023PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-34647 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).
- Product
- Hostel Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 28, 2023PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course.CVE-2023-34652 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course.
- Product
- Hostel Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Jun 28, 2023PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-34651 · Other software · Hospital Management System Project · reported by MITREMedium 6.1
PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).
- Product
- Hospital Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Jun 28, 2023PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-34650 · Other software · Small CRM Project · reported by MITREMedium 6.1
PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS).
- Product
- Small CRM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
May 23, 2023Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter.CVE-2023-33338 · Websites & servers · Phpgurukul · reported by MITRECritical 9.8
Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter.
- Product
- OLD AGE Home Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2023A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary code and access sensitivCVE-2023-31498 · Websites & servers · Phpgurukul · reported by MITRECritical 9.8
A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary code and access sensitive information via the session token parameter.
- Product
- Hospital Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Mar 15, 2023Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page.CVE-2023-24726 · Websites & servers · Phpgurukul · reported by MITRECritical 9.8
Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page.
- Product
- ART Gallery Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Mar 14, 2023BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page.CVE-2023-27074 · Websites & servers · Phpgurukul · reported by MITRECritical 9.8
BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page.
- Product
- BP Monitoring Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Feb 27, 2023A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a CVE-2023-23158 · Websites & servers · Phpgurukul · reported by MITREMedium 5.4
A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter on the enquiry page.
- Product
- ART Gallery Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Feb 27, 2023A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a CVE-2023-23157 · Websites & servers · Phpgurukul · reported by MITREMedium 5.4
A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page.
- Product
- ART Gallery Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Feb 27, 2023Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page.CVE-2023-23156 · Websites & servers · Phpgurukul · reported by MITRECritical 9.8
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page.
- Product
- ART Gallery Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comphpgurukul.com
Feb 27, 2023Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login.CVE-2023-23155 · Websites & servers · Phpgurukul · reported by MITRECritical 9.8
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login.
- Product
- ART Gallery Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comphpgurukul.com
Feb 10, 2023Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter.CVE-2023-23163 · Websites & servers · Phpgurukul · reported by MITRECritical 9.8
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter.
- Product
- ART Gallery Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comgithub.com
Feb 10, 2023Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php.CVE-2023-23162 · Websites & servers · Phpgurukul · reported by MITRECritical 9.8
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php.
- Product
- ART Gallery Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comgithub.com
Feb 10, 2023A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML viaCVE-2023-23161 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar.
- Product
- ART Gallery Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comgithub.com
Jan 26, 2023A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafteCVE-2022-45730 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function.
- Product
- Doctor Appointment Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Jan 12, 2023A cross-site scripting (XSS) vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a craftCVE-2022-47102 · Websites & servers · Phpgurukul · reported by MITREMedium 5.4
A cross-site scripting (XSS) vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.
- Product
- Student Study Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 12, 2023A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafteCVE-2022-45729 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter.
- Product
- Doctor Appointment Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 12, 2023Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.CVE-2022-45728 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.
- Product
- Doctor Appointment Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2022AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component search.php.CVE-2022-43369 · Websites & servers · Phpgurukul · reported by MITREMedium 6.1
AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component search.php.
- Product
- Auto/taxi Stand Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comphpgurukul.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.