CVE-2025-65379: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is then concatenated directly into a backend SQL query...

CVE-2025-51045: Improper Neutralization of Special Elements used in an SQL Command

Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability in the /admin/password-recovery.php file. This vulnerability is attributed to the insufficient validation of user input for the username parameter...

PT-2025-9697

Name of the Vulnerable Software and Affected Versions PHPGurukul Restaurant Table Booking System version 1.0 Description A critical issue was found in the PHPGurukul Restaurant Table Booking System. The problem is related to an unknown function of the file /admin/password-recovery.php, where the...

CVE-2025-1952: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/password-recovery.php. The manipulation of the argument username/mobileno leads to sql injection. It is possible to launch the attack...

CVE-2024-54842: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was found in phpgurukul Online Nurse Hiring System v1.0 in /admin/password-recovery.php via the mobileno parameter...

PT-2024-36422

Name of the Vulnerable Software and Affected Versions PHPGurukul Pre-School Enrollment System Project version 1.0 Description A SQL Injection issue was found in the /preschool/admin/password-recovery.php file, allowing remote attackers to execute arbitrary code via the mobileno parameter. This...

CVE-2024-10157: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/password-recovery.php of the component Reset Your Password Page. The manipulation of the argument username/mobileno leads to sql injection...