PHPGurukul covid19 Testing Management System 1.0

COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel.

A SQL Injection vulnerability was found in /covid-tms/check_availability.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the mobnumber POST request parameter.

PHPGurukul COVID19 Testing Management System login.php sql injection

PHPGurukul COVID19 Testing Management System test-details.php sql injection

PHPGurukul COVID19 Testing Management System edit-phlebotomist.php sql injection

PHPGurukul COVID19 Testing Management System new-user-testing.php sql injection

PHPGurukul COVID19 Testing Management System check_availability.php sql injection

PHPGurukul COVID19 Testing Management System bwdates-report-result.php sql injection

PHPGurukul COVID19 Testing Management System add-phlebotomist.php sql injection

PHPGurukul COVID19 Testing Management System password-recovery.php sql injection

PHPGurukul COVID19 Testing Management System patient-report.php sql injection

PHPGurukul COVID19 Testing Management System profile.php sql injection

PHPGurukul COVID19 Testing Management System search-report-result.php sql injection

A SQL Injection vulnerability was found in /covid-tms/password-recovery.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.

PHPGurukul COVID19 Testing Management System Take Action test-details.php cross site scripting

COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the "Admin name" parameter.

A Reflected Cross Site Scripting (XSS) vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter.