Priority HIGH 82
A SQL Injection vulnerability was found in /admin/forgot-password.php in Phpgurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00793 · Published 2025-02-13 · No fix listed CWE-89
Priority HIGH 82
A SQL Injection vulnerability was found in /admin/edit-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the editid GET request parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00793 · Published 2025-02-13 · No fix listed CWE-89
Priority HIGH 82
An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02643 · Published 2025-01-10 · No fix listed CWE-78
Priority HIGH 82
A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "pagetitle" parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01692 · Published 2025-01-10 · No fix listed CWE-79
Priority HIGH 70
A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00607 · Published 2025-07-17 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00503 · Published 2024-12-31 · No fix listed CWE-74
Priority HIGH 67
A SQL Injection vulnerability was found in /admin/manage-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the propertytype POST request parameter.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00758 · Published 2025-02-13 · No fix listed CWE-89
Priority HIGH 67
A SQL Injection vulnerability was found in /admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the email POST request parameter.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00758 · Published 2025-02-13 · No fix listed CWE-89
Priority HIGH 67
A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the " todate" POST request parameter.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00758 · Published 2025-02-13 · No fix listed CWE-89
Priority HIGH 67
A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the fromdate POST request parameter.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00758 · Published 2025-02-13 · No fix listed CWE-89
Priority HIGH 67
A SQL Injection was found in /admin/admin-profile.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactnumber POST request parameter.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00758 · Published 2025-02-13 · No fix listed CWE-89
Priority HIGH 67
A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the pagetitle POST request parameter.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00758 · Published 2025-02-13 · No fix listed CWE-89
Priority MEDIUM 60
A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record System Project in PHP v1.0 allows remote attackers to execute arbitrary code via the propertytype POST request parameter.
CVSS 3.1MEDIUM 5.5· Network · Low privileges · User interaction · EPSS 0.00348 · Published 2025-02-26 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.005 · Published 2025-05-01 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0042 · Published 2024-12-31 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0033 · Published 2024-12-31 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Land Record System 1.0 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00532 · Published 2024-12-31 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability has been found in PHPGurukul Land Record System 1.0 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00498 · Published 2024-12-31 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as problematic, has been found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00364 · Published 2024-12-31 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as problematic was found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00389 · Published 2024-12-31 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00305 · Published 2024-12-31 · No fix listed CWE-79
Priority LOW 24
A vulnerability was found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2024-12-31 · No fix listed CWE-79
Priority LOW 24
A vulnerability was found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0033 · Published 2024-12-31 · No fix listed CWE-79
Priority LOW 24
A vulnerability, which was classified as problematic, was found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00364 · Published 2024-12-31 · No fix listed CWE-79
Priority LOW 23
A vulnerability was found in PHPGurukul Land Record System 1.0.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00305 · Published 2024-12-31 · No fix listed CWE-79