Phpgurukul Vehicle Parking Management System vulnerabilities

CVE-2024-53364 [MEDIUM] CWE-89 CVE-2024-53364: A SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking Management System v1.13 in /us A SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/view-detail.php. This vulnerability affects the viewid parameter, where improper input sanitization allows attackers to inject malicious SQL queries.

CVE-2024-53365 [MEDIUM] CWE-79 CVE-2024-53365: A stored cross-site scripting (XSS) vulnerability was identified in PHPGURUKUL Vehicle Parking Manag A stored cross-site scripting (XSS) vulnerability was identified in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/profile.php. This vulnerability allows authenticated users to inject malicious XSS scripts into the profile name field.

CVE-2021-37805 [MEDIUM] CWE-79 CVE-2021-37805: A Stored Cross Site Scripting (XSS) vunerability exists in Sourcecodeste Vehicle Parking Management A Stored Cross Site Scripting (XSS) vunerability exists in Sourcecodeste Vehicle Parking Management System affected version 1.0 is via the add-vehicle.php endpoint.

CVE-2021-27822 [MEDIUM] CWE-79 CVE-2021-27822: A persistent cross site scripting (XSS) vulnerability in the Add Categories module of Vehicle Parkin A persistent cross site scripting (XSS) vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field.