Read the docs

PHPGurukul

Records1122All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical133CVSS 9.0–10.0
CVSS high107CVSS 7.0–8.9

Exploited now

PHPGurukul records in CISA KEV

No PHPGurukul vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hospital Management System 62 records HIGH Zoo Management System 37 records HIGH Art Gallery Management System 36 records HIGH Online Shopping Portal 33 records HIGH Online Fire Reporting System 32 records HIGH Complaint Management System 31 records HIGH Student Record System 29 records HIGH Beauty Parlour Management System 28 records HIGH

Records

12 records in Job Portal · all components

TI-2024-07852 CVE-2024-8470 · GHSA-pxg7-xwx3-q885

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07851 CVE-2024-8469 · GHSA-vrwg-mgfh-8rc8

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07850 CVE-2024-8468 · GHSA-mm65-4gm3-h22v

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07849 CVE-2024-8467 · GHSA-r9w6-vj2c-577r

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07848 CVE-2024-8466 · GHSA-7xv3-rpxg-r28m

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07847 CVE-2024-8465 · GHSA-hjrp-754v-h7fj

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07846 CVE-2024-8464 · GHSA-f7xr-hxhp-pp5m

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07845 CVE-2024-8463 · GHSA-phhw-57mq-75j6

File upload restriction bypass vulnerability in Job Portal

Priority MEDIUM 43

File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00513 Published 2024-09-05 No fix listed CWE-434
TI-2024-07855 CVE-2024-8473 · GHSA-m4q6-r3hq-hfgq

SQL injection vulnerability in Job Portal

Priority LOW 28

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00278 Published 2024-09-05 No fix listed CWE-79
TI-2024-07854 CVE-2024-8472 · GHSA-vv26-3gxj-65r5

SQL injection vulnerability in Job Portal

Priority LOW 28

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00278 Published 2024-09-05 No fix listed CWE-79
TI-2024-07853 CVE-2024-8471 · GHSA-cf94-f85j-g689

SQL injection vulnerability in Job Portal

Priority LOW 28

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00254 Published 2024-09-05 No fix listed CWE-79
Open these records in search →