Client Management System (Phpgurukul) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2024-11-20. Vendor: Phpgurukul.
CVEs of Client Management System
- CVE-2024-51209 - CVSS 6.1 (medium), 2024-11-20: Cross-Site Scripting (XSS) vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to inject arbitrary web script or HTML…
- CVE-2024-48570 - CVSS 7.5 (high), 2024-10-22: Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php.
- CVE-2024-30990 - CVSS 9.8 (critical), 2024-04-17: SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL…
- CVE-2024-30989 - CVSS 5.4 (medium), 2024-04-17: Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute…
- CVE-2024-30987 - CVSS 6.8 (medium), 2024-04-17: Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute…
- CVE-2024-30986 - CVSS 6.5 (medium), 2024-04-17: Cross Site Scripting vulnerability in /edit-services-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute…
- CVE-2024-30985 - CVSS 9.8 (critical), 2024-04-17: SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL…
- CVE-2024-30988 - CVSS 6.8 (medium), 2024-04-17: Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary…
