Client Management System

client_management_system

Vendor: Phpgurukul • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-51209 1Phpgurukul 1Client Management System Jun 17, 2026 Nov 20, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross-Site Scripting (XSS) vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to inject arbitrary web script or HTML via the search input field parameter to admin search invoice pa...Show more Cross-Site Scripting (XSS) vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to inject arbitrary web script or HTML via the search input field parameter to admin search invoice page and client search invoice page.Show less
CVE-2024-48570 1Phpgurukul 1Client Management System Jun 17, 2026 Oct 22, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php.
CVE-2024-30990 1Phpgurukul 1Client Management System Jun 17, 2026 Apr 17, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter.
CVE-2024-30989 1Phpgurukul 1Client Management System Jun 17, 2026 Apr 17, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parame...Show more Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parameter.Show less
CVE-2024-30988 1Phpgurukul 1Client Management System Jun 17, 2026 Apr 17, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the Search bar.
CVE-2024-30987 1Phpgurukul 1Client Management System Jun 17, 2026 Apr 17, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and...Show more Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and todate parameters.Show less
CVE-2024-30986 1Phpgurukul 1Client Management System Jun 17, 2026 Apr 17, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability in /edit-services-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and via "price" and "sname" parameter.
CVE-2024-30985 1Phpgurukul 1Client Management System Jun 17, 2026 Apr 17, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters.