Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

25 records

Vendor: PHPGurukul Component: Land Record System Clear all filters
TI-2025-03700 CVE-2025-4163 · GHSA-7hw5-qp4r-xc6c

PHPGurukul Land Record System aboutus.php sql injection

Priority MEDIUM 57

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.005 Published 2025-05-01 No fix listed CWE-74
TI-2025-19012 CVE-2025-25462 · GHSA-pq8f-mw6x-f2j2

A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land…

Priority MEDIUM 60

A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record System Project in PHP v1.0 allows remote attackers to execute arbitrary code via the propertytype POST request parameter.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00348 Published 2025-02-26 No fix listed CWE-89
TI-2025-18977 CVE-2025-25356 · GHSA-h3cq-pv9v-4qxp

A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in…

Priority HIGH 67

A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the " todate" POST request parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00758 Published 2025-02-13 No fix listed CWE-89
TI-2025-18976 CVE-2025-25355 · GHSA-x5h7-6c5j-qhg6

A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in…

Priority HIGH 67

A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the fromdate POST request parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00758 Published 2025-02-13 No fix listed CWE-89
TI-2024-38031 CVE-2024-57687 · GHSA-x58x-7p55-7r3g

An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in…

Priority HIGH 82

An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02643 Published 2025-01-10 No fix listed CWE-78
TI-2024-38030 CVE-2024-57686 · GHSA-75gg-px33-62vq

A Cross Site Scripting (XSS) vulnerability was found in…

Priority HIGH 82

A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "pagetitle" parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2025-01-10 No fix listed CWE-79
TI-2024-12133 CVE-2024-13085 · GHSA-7545-6w3x-8r4v

PHPGurukul Land Record System login.php sql injection

Priority HIGH 70

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00503 Published 2024-12-31 No fix listed CWE-74
TI-2024-12126 CVE-2024-13078 · GHSA-4mg3-889w-x7xm

PHPGurukul Land Record System index.php sql injection

Priority MEDIUM 57

A vulnerability has been found in PHPGurukul Land Record System 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00498 Published 2024-12-31 No fix listed CWE-74