Priority MEDIUM 62
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00155 · Published 2025-06-27 · No fix listed CWE-352
Priority MEDIUM 62
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00155 · Published 2025-06-27 · No fix listed CWE-352
Priority MEDIUM 60
A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00242 · Published 2025-06-27 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability classified as problematic was found in PHPGurukul Hospital Management System 4.0.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00338 · Published 2025-06-25 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 4.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00463 · Published 2025-06-24 · No fix listed CWE-74
Priority MEDIUM 55
A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0027 · Published 2025-06-20 · No fix listed CWE-79
Priority LOW 22
A vulnerability, which was classified as problematic, has been found in PHPGurukul Bus Pass Management System 1.0.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00291 · Published 2025-06-20 · No fix listed CWE-79
Priority HIGH 70
A vulnerability was found in PHPGurukul Vehicle Record Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00586 · Published 2025-06-10 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00555 · Published 2025-06-06 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00527 · Published 2025-06-06 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00439 · Published 2025-06-05 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00439 · Published 2025-06-05 · No fix listed CWE-74
Priority MEDIUM 55
A vulnerability was found in PHPGurukul Hospital Management System 4.0.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00361 · Published 2025-06-04 · No fix listed CWE-79
Priority MEDIUM 58
Multiple stored cross-site scripting (XSS) vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web s…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00262 · Published 2025-05-23 · No fix listed CWE-79
Priority MEDIUM 55
Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web script…
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00267 · Published 2025-05-23 · No fix listed CWE-79
Priority MEDIUM 54
A cross-site scripting (XSS) vulnerability in the component mcgs/admin/aboutus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injec…
CVSS 3.1MEDIUM 4.6· Local · Low privileges · User interaction · EPSS 0.0023 · Published 2025-05-19 · No fix listed CWE-79
Priority HIGH 70
A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00562 · Published 2025-05-16 · No fix listed CWE-74
Priority MEDIUM 60
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the name, email, and mobile parameters.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00287 · Published 2025-05-15 · No fix listed CWE-79
Priority LOW 27
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum, enginenumber' in the /admin/edit-vehicle.php component.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00298 · Published 2025-05-15 · No fix listed CWE-79
Priority MEDIUM 60
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/add-brand.php via the brandname parameter.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00287 · Published 2025-05-15 · No fix listed CWE-79
Priority MEDIUM 60
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit-brand.php?bid={brandId}.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00287 · Published 2025-05-15 · No fix listed CWE-79
Priority HIGH 70
A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00519 · Published 2025-05-05 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00526 · Published 2025-04-29 · No fix listed CWE-74
Priority HIGH 67
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to SQL Injection in /index.php via the 'searchinputdata' parameter.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00265 · Published 2025-03-21 · No fix listed CWE-89
Priority LOW 26
Phpgurukul Human Metapneumovirus (HMPV) – Testing Management System v1.0 is vulnerable to SQL Injection in /patient-report.php via the parameter searchdata..
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00243 · Published 2025-03-21 · No fix listed CWE-89
Load more