Shuvo Ahmed Sanin

**Name of the Vulnerable Software and Affected Versions** SourceCodester Pet Grooming Management Software version 1.0 **Description** The software is susceptible to Cross Site Scripting (XSS) attacks. The issue is located in the Customer Name field within the Customer Management Section. Input provided through this field can be used to inject malicious scripts. **Recommendations** Apply input validation and sanitization to the Customer Name field in the Customer Management Section.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Online Shopping Portal Project versions 2.1 **Description** The software is susceptible to a SQL Injection issue. This flaw is located in the /shopping/login.php file and can be triggered through the `fullname` parameter. **Recommendations** Apply updates to address the issue in version 2.1.