phpgurukul

1,081 tracked vulnerabilities.

CVE-2025-10794 MEDIUM
PHPGurukul Car Rental Project 3.0 - Cross-Site Scripting via search.php autofocus Parameter
Sep 22, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-10664 HIGH
PHPGurukul Small CRM 4.0 - SQL Injection via /create-ticket.php Subject Parameter
Sep 18, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-10663 HIGH
PHPGurukul Online Course Registration 3.1 - SQL Injection via cgpa Parameter
Sep 18, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-10624 HIGH
PHPGurukul User Management System 1.0 - SQL Injection via Email Parameter in Login
Sep 17, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-57145 MEDIUM
phpgurukul auto_taxi_stand_management_system - Stored Cross-Site Scripting via search-autootaxi.php Form Field
Sep 16, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-57119 CRITICAL
Online Library Management System <3.0 - Privilege Escalation
Sep 16, 2025
CVSS 9.8
EPSS 0.00
CVE-2025-57118 CRITICAL
PHPGurukul Online-Library-Management-System 3.0 - Privilege Escalation via index.php
Sep 15, 2025
CVSS 9.8
EPSS 0.00
CVE-2025-10459 HIGH
PHPGurukul Beauty Parlour Management System 1.1 - SQL Injection via delid Parameter in all-appointment.php
Sep 15, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-56710 HIGH
PHPGurukul Student-Result-Management-System-Using-PHP-V2.0 - Cross-Site Request Forgery via Profile Page
Sep 15, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-10403 HIGH
PHPGurukul Beauty Parlour Management System 1.1 - SQL Injection via viewid Parameter
Sep 14, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-10402 HIGH
PHPGurukul Beauty Parlour Management System 1.1 - SQL Injection via /admin/readenq.php delid Parameter
Sep 14, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-52074 MEDIUM
PHPGURUKUL Online Shopping Portal 2.1 - Stored Cross-Site Scripting via Quantity Parameter
Sep 12, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-40696 MEDIUM
Online Fire Reporting System 1.2 - Stored XSS via fullname, location, and message
Sep 11, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-40695 MEDIUM
Online Fire Reporting System v1.2 - Authenticated Stored Cross-Site Scripting via remark status takeaction Parameters
Sep 11, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-40694 MEDIUM
Online Fire Reporting System 1.2 - Authenticated Stored Cross-Site Scripting via fromdate and todate Parameters
Sep 11, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-40693 MEDIUM
Online Fire Reporting System 1.2 - Authenticated Stored Cross-Site Scripting via tname Parameter
Sep 11, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-40692 CRITICAL
Online Fire Reporting System 1.2 - SQL Injection via requestid Parameter
Sep 11, 2025
CVSS 9.8
EPSS 0.00
CVE-2025-40691 CRITICAL
Online Fire Reporting System 1.2 - SQL Injection via todate Parameter
Sep 11, 2025
CVSS 9.8
EPSS 0.00
CVE-2025-40690 CRITICAL
Online Fire Reporting System 1.2 - SQL Injection via teamid Parameter
Sep 11, 2025
CVSS 9.8
EPSS 0.00
CVE-2025-40689 CRITICAL
Online Fire Reporting System 1.2 - SQL Injection via remark status or requestid Parameter
Sep 11, 2025
CVSS 9.8
EPSS 0.00
CVE-2025-40687 CRITICAL
Online Fire Reporting System 1.2 - SQL Injection via mobilenumber, teamleadname, and teammember Parameters
Sep 11, 2025
CVSS 9.8
EPSS 0.00
CVE-2025-10114 HIGH
PHPGurukul Small CRM 4.0 - SQL Injection via Name Parameter in Profile
Sep 09, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-10098 MEDIUM
PHPGurukul User Management System 1.0 - SQL Injection via uid Parameter in edit-user-profile.php
Sep 08, 2025
CVSS 6.3
EPSS 0.00
CVE-2025-10079 HIGH
PHPGurukul Small CRM 4.0 - SQL Injection via Contact Parameter in get-quote.php
Sep 08, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-10025 HIGH
PHPGurukul Online Course Registration 3.1 - SQL Injection via Semester Parameter
Sep 05, 2025
CVSS 7.3
EPSS 0.00