Vulnerabilities (CVE)

Filtered by vendor Phpgurukul Subscribe
Filtered by product Directory Management System
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-31384 1 Phpgurukul 1 Directory Management System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php.
CVE-2022-31383 1 Phpgurukul 1 Directory Management System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php.
CVE-2022-31382 1 Phpgurukul 1 Directory Management System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php.
CVE-2022-29006 1 Phpgurukul 1 Directory Management System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication.