PHPGurukul Dairy Farm Shop Management System

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows attackers to bypass authentication.

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName and ProductPrice parameters in add-product.php.

Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised.

Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via sales-report-ds.php file.

Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via bwdate-report-ds.php file.

PHPGurukul Dairy Farm Shop Management System search-product.php sql injection

PHPGurukul Dairy Farm Shop Management System sales-report-details.php sql injection

PHPGurukul Dairy Farm Shop Management System add-category.php sql injection

PHPGurukul Dairy Farm Shop Management System add-product.php sql injection

PHPGurukul Dairy Farm Shop Management System profile.php sql injection

PHPGurukul Dairy Farm Shop Management System bwdate-report-details.php sql injection

PHPGurukul Dairy Farm Shop Management System add-company.php sql injection

PHPGurukul Dairy Farm Shop Management System edit-company.php sql injection

PHPGurukul Dairy Farm Shop Management System invoices.php sql injection

PHPGurukul Dairy Farm Shop Management System edit-product.php sql injection

PHPGurukul Dairy Farm Shop Management System edit-category.php sql injection

PHPGurukul Dairy Farm Shop Management System view-invoice.php sql injection

PHPGurukul Dairy Farm Shop Management System invoice.php sql injection

A time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability exists in the manage-companies.php file and allows remote attackers to execute arbitrary SQL code via the companyname parameter in a POST request.

Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters.

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php.

PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) via the pname parameter in add_product.php and edit_product.php.

Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow attackers to execute arbitrary web scripts and HTML via a crafted payload injected into the Category and Category Field parameters.

A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability allows remote attackers to execute arbitrary SQL code via the category and categorycode parameters in a POST request to the manage-categories.php file.