Filtered by vendor Phpgurukul Subscriptions
Filtered by product User Registration And Login And User Management System Subscriptions
Total 8 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-11817 1 Phpgurukul 2 User Registration \& Login And User Management System, User Registration And Login And User Management System 2024-12-03 7.3 High
A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-11818 1 Phpgurukul 2 User Registration \& Login And User Management System, User Registration And Login And User Management System 2024-12-03 7.3 High
A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and User Management System 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-50843 1 Phpgurukul 1 User Registration And Login And User Management System 2024-11-15 5.3 Medium
A Directory listing issue was found in PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers attacker to access sensitive files and directories via /loginsystem/assets.
CVE-2024-48280 1 Phpgurukul 1 User Registration And Login And User Management System 2024-10-16 7.6 High
A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parameter in a POST HTTP request.
CVE-2024-48283 1 Phpgurukul 1 User Registration And Login And User Management System 2024-10-16 9.8 Critical
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter.
CVE-2024-48282 1 Phpgurukul 1 User Registration And Login And User Management System 2024-10-16 7.6 High
A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the femail parameter in a POST HTTP request.
CVE-2024-48278 1 Phpgurukul 1 User Registration And Login And User Management System 2024-10-16 5.5 Medium
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to Cross Site Request Forgery (CSRF) via /edit-profile.php.
CVE-2024-48279 1 Phpgurukul 1 User Registration And Login And User Management System 2024-10-16 7.6 High
A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary HTML code via the searchkey parameter in a POST HTTP request.