PT-2025-30694 · Phpgurukul · Autotaxi Stand Management System
Longlagon
·
Published
2025-07-24
·
Updated
2025-07-25
·
CVE-2025-8115
Longlagon
·
Published
2025-07-24
·
Updated
2025-07-25
·
CVE-2025-8115
4.0
Medium
Base vector | Vector | AV:N/AC:L/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions:
PHPGurukul Taxi Stand Management System version 1.0
Description:
A cross site scripting issue exists due to the manipulation of the `registrationnumber`/`licensenumber` argument in the /admin/new-autoortaxi-entry-form.php file. The attack can be launched remotely. The exploit has been disclosed to the public.
Recommendations:
Address the manipulation of the `registrationnumber` and `licensenumber` arguments in the /admin/new-autoortaxi-entry-form.php file.
Exploit
Fix
XSS
Code Injection