Girishbo

Name of the Vulnerable Software and Affected Versions: PHPGurukul Credit Card Application Management System version 1.0 Description: A problematic issue was found in the PHPGurukul Credit Card Application Management System, affecting unknown code of the file /admin/new-ccapplication.php. This issue leads to cross-site scripting and can be initiated remotely. Recommendations: For PHPGurukul Credit Card Application Management System version 1.0, consider restricting access to the /admin/new-ccapplication.php file until a fix is available. As a temporary workaround, avoid using this file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Credit Card Application Management System version 1.0 **Description** A critical vulnerability exists in PHPGurukul Credit Card Application Management System. The issue involves a SQL injection vulnerability within an unknown function of the file `/admin/index.php`. Manipulation of the `Username` argument can lead to successful exploitation of this vulnerability remotely. The exploit has been publicly disclosed. **Recommendations** For PHPGurukul Credit Card Application Management System version 1.0, sanitize or validate the `Username` input to prevent SQL injection. As a temporary workaround, restrict access to the `/admin/index.php` file.