Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:client_management_system:1.1:*:*:*:*:*:*:*

part: a version: 1.1 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductClient Management System (a88c5c8e-feda-57ea-a038-11ff7b84d31b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-30990 vulnerable 2026-06-08 06:35:30.784142 Details available
SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter.
Published: 2024-04-17T00:00:00.000Z
Updated: 2024-08-02T01:46:04.051Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30989 vulnerable 2026-06-08 06:35:30.783690 Details available
Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parameter.
Published: 2024-04-17T00:00:00.000Z
Updated: 2025-03-14T16:08:11.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30988 vulnerable 2026-06-08 06:35:30.783346 Details available
Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the Search bar.
Published: 2024-04-17T00:00:00.000Z
Updated: 2024-08-02T01:46:04.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30987 vulnerable 2026-06-08 06:35:30.782853 Details available
Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and todate parameters.
Published: 2024-04-17T00:00:00.000Z
Updated: 2024-08-02T01:46:03.732Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30986 vulnerable 2026-06-08 06:35:30.782278 Details available
Cross Site Scripting vulnerability in /edit-services-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and via "price" and "sname" parameter.
Published: 2024-04-17T00:00:00.000Z
Updated: 2024-08-02T01:46:03.424Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30985 vulnerable 2026-06-08 06:35:30.781805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.