Browse CVEs

CRITICAL 9.8 CVE-2022-31382 Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php. Directory Management System Mitigation only Fix from $2,3002022-06-16 CRITICAL 9.8 CVE-2022-31383 Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php. Directory Management System Mitigation only Fix from $2,3002022-06-16 CRITICAL 9.8 CVE-2022-31384 Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php. Directory Management System Mitigation only Fix from $2,3002022-06-16 MEDIUM 5.4 CVE-2022-31914 Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24. Zoo Management System No fix yet Fix from $1,6002022-06-16 MEDIUM 6.1 CVE-2021-4232 A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticke… Zoo Management System Mitigation only Fix from $1,6002022-05-26 MEDIUM 6.1 CVE-2022-29004 Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php. E Diary Management System No fix yet Fix from $1,6002022-05-23 MEDIUM 6.1 CVE-2022-29005 Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers … Online Birth Certificate System Mitigation only Fix from $1,6002022-05-23 MEDIUM 5.4 CVE-2022-1816 A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/v… Zoo Management System Mitigation only Fix from $1,6002022-05-23 HIGH 8.8 CVE-2022-28992 A Cross-Site Request Forgery (CSRF) in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request. Online Banquet Booking System No fix yet Fix from $1,9502022-05-20 CRITICAL 9.8 CVE-2022-29009EPSS 23% Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allow… Cyber Cafe Management System No fix yet Fix from $2,3002022-05-11 MEDIUM 6.5 CVE-2022-29008 An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensit… Bus Pass Management System No fix yet Fix from $1,6002022-05-11 CRITICAL 9.8 CVE-2022-29006EPSS 19% Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attacke… Directory Management System No fix yet Fix from $2,3002022-05-11 CRITICAL 9.8 CVE-2022-29007EPSS 19% Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows a… Dairy Farm Shop Management System No fix yet Fix from $2,3002022-05-11 CRITICAL 9.8 CVE-2022-27351 Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy. This vulnerability allows… Zoo Management System No fix yet Fix from $2,3002022-04-08 HIGH 8.8 CVE-2022-27992 Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /public_html/animals via the class_id parameter. Zoo Management System No fix yet Fix from $1,9502022-04-08 CRITICAL 9.8 CVE-2021-46110 Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters. Online Shopping Portal No fix yet Fix from $2,3002022-02-18 HIGH 7.5 CVE-2022-24226 Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php. Hospital Management System No fix yet Fix from $1,9502022-02-15 CRITICAL 9.8 CVE-2020-36062 Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the contro… Dairy Farm Shop Management System No fix yet Fix from $2,3002022-02-11 HIGH 7.5 CVE-2022-24646 Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/contact.php via the txt… Hospital Management System No fix yet Fix from $1,9502022-02-10 CRITICAL 9.8 CVE-2022-24263EPSS 8% Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email … Hospital Management System No fix yet Fix from $2,3002022-01-31 HIGH 7.5 CVE-2021-44315 In Bus Pass Management System v1.0, Directory Listing/Browsing is enabled on the web server which allows an attacker to view the sensitive files of t… Bus Pass Management System No fix yet Fix from $1,9502021-12-16 MEDIUM 5.4 CVE-2021-44317 In Bus Pass Management System v1.0, parameters 'pagedes' and `About Us` are affected with a Stored Cross-site scripting vulnerability. Bus Pass Management System No fix yet Fix from $1,6002021-12-16 CRITICAL 9.8 CVE-2021-44966 SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an adm… Employee Record Management System No fix yet Fix from $2,3002021-12-13 HIGH 7.5 CVE-2021-44965 Directory traversal vulnerability in /admin/includes/* directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and d… Employee Record Management System No fix yet Fix from $1,9502021-12-13 HIGH 8.8 CVE-2021-43137 Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel management system 2.1 via the name field in my-profile… Hostel Management System No fix yet Fix from $1,9502021-12-01 CRITICAL 9.8 CVE-2021-43451 SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php. Employee Record Management System No fix yet Fix from $2,3002021-12-01 MEDIUM 6.1 CVE-2021-39411 Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the (1) searchdata parameter in (a) doctor… Hospital Management System Mitigation only Fix from $1,6002021-11-05 HIGH 7.5 CVE-2021-37807 An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /check_availability.php endp… Online Shopping Portal No fix yet Fix from $1,9502021-10-27 MEDIUM 5.9 CVE-2021-37806 An SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System affected version 1.0. The system is vulnerable to t… Vehicle Parking Management System No fix yet Fix from $1,6002021-10-27 MEDIUM 5.9 CVE-2021-37808 SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the (1) category, (2) subcategory, (3) sucatdescription, an… News Portal No fix yet Fix from $1,6002021-10-27