A Cross Site Scripting (XSS) vulnerability in the profile.php of PHPGurukul Beauty Parlour Management System v1.1 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "Firstname" and "Last name" parameters.
References
| Link | Resource |
|---|---|
| http://phpgurukul.com | Product |
| https://github.com/sbksibi/CVEs/blob/main/CVE-2024-53481.md | Exploit Third Party Advisory |
Configurations
History
15 Apr 2025, 20:35
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:phpgurukul:beauty_parlour_management_system:1.1:*:*:*:*:*:*:* | |
| References | () http://phpgurukul.com - Product | |
| References | () https://github.com/sbksibi/CVEs/blob/main/CVE-2024-53481.md - Exploit, Third Party Advisory | |
| First Time |
Phpgurukul beauty Parlour Management System
Phpgurukul |
|
| Summary |
|
10 Dec 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
10 Dec 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-10 20:15
Updated : 2025-04-15 20:35
NVD link : CVE-2024-53481
Mitre link : CVE-2024-53481
CVE.ORG link : CVE-2024-53481
JSON object : View
Products Affected
phpgurukul
- beauty_parlour_management_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')