CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3691 – PHPGurukul Small CRM Registration Page sql injection
https://notcve.org/view.php?id=CVE-2024-3691
A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM 3.0. Affected by this issue is some unknown functionality of the component Registration Page. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/nikhil-aniill/Small-CRM-CVE https://vuldb.com/?ctiid.260480 https://vuldb.com/?id.260480 https://vuldb.com/?submit.312975 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3690 – PHPGurukul Small CRM Change Password sql injection
https://notcve.org/view.php?id=CVE-2024-3690
A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/psudo-bugboy/CVE-2024 https://vuldb.com/?ctiid.260479 https://vuldb.com/?id.260479 https://vuldb.com/?submit.312974 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 3.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3091 – PHPGurukul Emergency Ambulance Hiring Portal Search Request Page search.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-3091
A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/search.php of the component Search Request Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. • https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/eahp_authrxss.md https://vuldb.com/?ctiid.258684 https://vuldb.com/?id.258684 https://vuldb.com/?submit.306965 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 3.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3090 – PHPGurukul Emergency Ambulance Hiring Portal Add Ambulance Page add-ambulance.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-3090
A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/add-ambulance.php of the component Add Ambulance Page. The manipulation of the argument Ambulance Reg No/Driver Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/eahp_authsxss.md https://vuldb.com/?ctiid.258683 https://vuldb.com/?id.258683 https://vuldb.com/?submit.306964 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 2CVE-2024-3089 – PHPGurukul Emergency Ambulance Hiring Portal Manage Ambulance Page manage-ambulance.php cross-site request forgery
https://notcve.org/view.php?id=CVE-2024-3089
A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/manage-ambulance.php of the component Manage Ambulance Page. The manipulation of the argument del leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/XenoM0rph97/CVE-2024-30896 https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/eahp_csrf.md https://vuldb.com/?ctiid.258682 https://vuldb.com/?id.258682 https://vuldb.com/?submit.306963 • CWE-352: Cross-Site Request Forgery (CSRF) •