A Reflected Cross Site Scripting (XSS) vulnerability was found in /trms/listed- teachers.php in PHPGurukul Teachers Record Management System v2.1, which allows remote attackers to execute arbitrary code via "searchinput" POST request parameter.
References
| Link | Resource |
|---|---|
| https://github.com/vkcyberexpert/CVE-Writeup/blob/main/PHPGurukul/Teachers%20Record/Reflected%20XSS.pdf | Exploit Third Party Advisory Mitigation |
Configurations
History
31 Mar 2025, 17:47
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Phpgurukul teachers Record Management System
Phpgurukul |
|
| References | () https://github.com/vkcyberexpert/CVE-Writeup/blob/main/PHPGurukul/Teachers%20Record/Reflected%20XSS.pdf - Exploit, Third Party Advisory, Mitigation | |
| CPE | cpe:2.3:a:phpgurukul:teachers_record_management_system:2.1:*:*:*:*:*:*:* | |
| Summary |
|
16 Oct 2024, 18:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-94 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
16 Oct 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-16 15:15
Updated : 2025-03-31 17:47
NVD link : CVE-2024-48744
Mitre link : CVE-2024-48744
CVE.ORG link : CVE-2024-48744
JSON object : View
Products Affected
phpgurukul
- teachers_record_management_system
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')