CVE-2023-39551
CRITICALPhpgurukul Online Security Guards Hiring System - SQL Injection
Title source: ruleDescription
PHPGurukul Online Security Guards Hiring System v.1.0 is vulnerable to SQL Injection via osghs/admin/search.php.
References (4)
Core 4
Core References
Exploit, Third Party Advisory
https://github.com/Trinity-SYT-SECURITY/XSS_vuln_issue/blob/main/Online%20Security%20Guards%20Hiring%20System%201.0.md
Third Party Advisory, US Government Resource
https://nvd.nist.gov/vuln/detail/CVE-2023-39551
Third Party Advisory
https://www.chtsecurity.com/news/0dbe8e1d-0a6c-4604-9cf1-778ddc86a8c1
Third Party Advisory
https://www.chtsecurity.com/news/285b9375-ba65-4f61-a02a-a575337dc86c
Scores
CVSS v3
9.8
EPSS
0.0080
EPSS Percentile
74.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
total
Details
CWE
CWE-89
Status
published
Products (1)
phpgurukul/online_security_guards_hiring_system
1.0
Published
Aug 04, 2023
Tracked Since
Feb 18, 2026