Dhabaleshwar

**Name of the Vulnerable Software and Affected Versions** OSPG binwalk versions prior to 3 **Description** A path traversal issue exists in the WinCE Extraction Plugin within the `read null terminated string()` function of the `src/binwalk/plugins/winceextract.py` file. A local attacker can manipulate the `self.file name` variable to perform this attack. **Recommendations** Migrate to binwalk v3.

Name of the Vulnerable Software and Affected Versions pytries datrie versions up to 0.8.3 Description A deserialization issue exists in the Trie.load, Trie.read, and Trie. setstate functions within the src/datrie.pyx file of the trie File Handler component. This can be exploited remotely. The exploit has been publicly disclosed, and the project has been notified but has not yet responded. Recommendations Update to a version beyond 0.8.3.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Emergency Ambulance Hiring Portal version 1.0 **Description** A problem was found in the processing of the Hire an Ambulance Page component. The manipulation of the `Patient Name`, `Relative Name`, `Relative Phone Number`, `City`, `State`, or `Message` arguments leads to cross-site scripting. The attack can be initiated remotely. **Recommendations** For PHPGurukul Emergency Ambulance Hiring Portal version 1.0, consider temporarily restricting the use of the Hire an Ambulance Page until a fix is available. Avoid using the `Patient Name`, `Relative Name`, `Relative Phone Number`, `City`, `State`, or `Message` arguments in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Emergency Ambulance Hiring Portal version 1.0 **Description** A vulnerability was found in the PHPGurukul Emergency Ambulance Hiring Portal, affecting an unknown function of the file /admin/search.php of the component Search Request Page. This issue leads to cross-site scripting and can be launched remotely. The exploit has been disclosed to the public. **Recommendations** For PHPGurukul Emergency Ambulance Hiring Portal version 1.0, consider disabling access to the `/admin/search.php` file until a patch is available to prevent cross-site scripting attacks. Restrict access to the Search Request Page component to minimize the risk of exploitation. Avoid using the affected function in the Search Request Page until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Emergency Ambulance Hiring Portal version 1.0 **Description** A vulnerability was found in the processing of the file /admin/add-ambulance.php of the component Add Ambulance Page. The manipulation of the argument `Ambulance Reg No/Driver Name` leads to cross-site scripting. The attack may be initiated remotely. **Recommendations** For PHPGurukul Emergency Ambulance Hiring Portal version 1.0, as a temporary workaround, consider restricting access to the `/admin/add-ambulance.php` page until a patch is available. Avoid using the `Ambulance Reg No/Driver Name` argument in the affected page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Emergency Ambulance Hiring Portal version 1.0 **Description** A cross-site request forgery issue has been identified, affecting the Manage Ambulance Page component, specifically the file /admin/manage-ambulance.php. The manipulation of the `del` argument leads to this issue. The attack can be initiated remotely. **Recommendations** For PHPGurukul Emergency Ambulance Hiring Portal version 1.0, as a temporary workaround, consider restricting access to the `/admin/manage-ambulance.php` page until a patch is available. Additionally, avoid using the `del` argument in the affected page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Emergency Ambulance Hiring Portal version 1.0 **Description** A critical issue was found in the Forgot Password Page component, specifically in the /admin/forgot-password.php file. The `username` argument is vulnerable to sql injection, allowing for remote attacks. The issue has been publicly disclosed and can be exploited. **Recommendations** For PHPGurukul Emergency Ambulance Hiring Portal version 1.0, as a temporary workaround, consider restricting access to the /admin/forgot-password.php file until a patch is available. Avoid using the `username` argument in the affected page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Emergency Ambulance Hiring Portal version 1.0 **Description** A critical issue has been found in the Ambulance Tracking Page component, specifically in the file ambulance-tracking.php. The manipulation of the `searchdata` argument leads to SQL injection. This issue can be exploited remotely. **Recommendations** For PHPGurukul Emergency Ambulance Hiring Portal version 1.0, consider restricting access to the `ambulance-tracking.php` file until a patch is available. As a temporary workaround, avoid using the `searchdata` argument in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Emergency Ambulance Hiring Portal version 1.0 **Description** A problematic issue was found in the Ambulance Tracking Page component, specifically in the file ambulance-tracking.php. The manipulation of the `searchdata` argument leads to cross-site scripting. This issue can be exploited remotely. **Recommendations** For PHPGurukul Emergency Ambulance Hiring Portal version 1.0, consider restricting access to the `ambulance-tracking.php` file or disabling the `searchdata` argument manipulation in the Ambulance Tracking Page until a fix is available.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Emergency Ambulance Hiring Portal version 1.0 **Description** A critical issue has been discovered, affecting an unknown function of the file /admin/login.php of the component Admin Login Page. The manipulation of the `username` argument leads to sql injection, allowing for remote attacks. The exploit has been publicly disclosed. **Recommendations** For PHPGurukul Emergency Ambulance Hiring Portal version 1.0, consider temporarily restricting access to the /admin/login.php file until a patch is available. As a mitigation measure, avoid using the `username` argument in the affected Admin Login Page until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Online Notes Sharing System version 1.0 **Description** A problematic issue affects the processing of the file /user/add-notes.php, leading to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For PHPGurukul Online Notes Sharing System version 1.0, consider restricting access to the /user/add-notes.php file until a patch is available. As a temporary workaround, avoid using the file /user/add-notes.php for uploading notes to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Online Notes Sharing System version 1.0 **Description** A problem was found in the system, affecting an unknown part of the file /user/profile.php. The manipulation of the `name` argument leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For PHPGurukul Online Notes Sharing System version 1.0, consider disabling access to the /user/profile.php file until a patch is available. Restrict the manipulation of the `name` argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Online Notes Sharing System version 1.0 **Description** A vulnerability was found in the PHPGurukul Online Notes Sharing System, affecting unknown code of the file /user/signup.php. This issue leads to weak password requirements. The attack can be initiated remotely, with a rather high complexity and difficult exploitation. The exploit has been disclosed to the public and may be used. **Recommendations** For PHPGurukul Online Notes Sharing System version 1.0, consider implementing stronger password requirements to mitigate the risk of exploitation. As a temporary workaround, restrict access to the /user/signup.php file until a patch is available. Additionally, review and enhance the password validation process to prevent weak passwords from being used.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Online Notes Sharing System version 1.0 **Description** A problematic vulnerability has been found in the Contact Information Handler component of the PHPGurukul Online Notes Sharing System. The issue is related to the manipulation of the `mobilenumber` argument, which leads to improper access controls. This can be exploited remotely. The exploit has been disclosed to the public. **Recommendations** For PHPGurukul Online Notes Sharing System version 1.0, consider restricting access to the `/user/profile.php` file until a patch is available. As a temporary workaround, avoid using the `mobilenumber` argument in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Online Notes Sharing System version 1.0 **Description** A vulnerability has been found in the PHPGurukul Online Notes Sharing System, affecting an unknown functionality of the file user/profile.php. The manipulation of the `name` or `email` argument leads to cross-site scripting. The attack can be launched remotely. **Recommendations** For PHPGurukul Online Notes Sharing System version 1.0, consider disabling the `user/profile.php` file or restricting access to it until a patch is available. As a temporary workaround, avoid using the `name` and `email` arguments in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Online Notes Sharing System version 1.0 **Description** A vulnerability was found in the PHPGurukul Online Notes Sharing System, affecting some unknown functionality of the file /user/manage-notes.php of the component Notes Handler. The manipulation of the `delid` argument leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For PHPGurukul Online Notes Sharing System version 1.0, consider disabling the `delid` argument in the /user/manage-notes.php file as a temporary workaround to minimize the risk of exploitation. Restrict access to the Notes Handler component to minimize the risk of exploitation. Avoid using the `delid` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Teacher Subject Allocation Management System version 1.0 **Description** A problematic vulnerability has been found in the PHPGurukul Teacher Subject Allocation Management System. The issue affects an unknown function of the file /admin/course.php, specifically the component Delete Course Handler. The manipulation of the `delid` argument leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For PHPGurukul Teacher Subject Allocation Management System version 1.0, consider disabling the Delete Course Handler component or restricting access to the /admin/course.php file until a patch is available. As a temporary workaround, avoid using the `delid` argument in the affected API endpoint. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Nipah Virus Testing Management System version 1.0 **Description** A critical vulnerability was found in the PHPGurukul Nipah Virus Testing Management System, affecting the file password-recovery.php. The manipulation of the `username` argument leads to SQL injection, allowing an attacker to execute arbitrary SQL queries to the database. This can be initiated remotely. **Recommendations** For PHPGurukul Nipah Virus Testing Management System version 1.0, as a temporary workaround, consider disabling the password recovery feature or restricting access to the password-recovery.php file until a patch is available. Avoid using the `username` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Teacher Subject Allocation Management System version 1.0 **Description** A vulnerability was found in the PHPGurukul Teacher Subject Allocation Management System, affecting some unknown functionality of the file /admin/subject.php, specifically the component Create a new Subject. The manipulation of the `cid` argument leads to cross-site request forgery. The attack may be launched remotely. **Recommendations** For PHPGurukul Teacher Subject Allocation Management System version 1.0, consider disabling the functionality related to the `cid` argument in the /admin/subject.php file as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Teacher Subject Allocation Management System version 1.0 **Description** A vulnerability has been found in the PHPGurukul Teacher Subject Allocation Management System, classified as problematic. This issue affects unknown code of the file index.php. The manipulation of the argument `searchdata` with the input `<script>alert(5)</script>` leads to cross-site scripting. The attack can be initiated remotely. **Recommendations** For PHPGurukul Teacher Subject Allocation Management System version 1.0, as a temporary workaround, consider validating and sanitizing the `searchdata` argument to prevent cross-site scripting attacks. Restrict access to the index.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.