Lucene search
+L

22 matches found

NVD
NVD
•added 2026/09/15 2:16 a.m.•18 views

CVE-2026-90850

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

4.8CVSS0.00368EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/15 1:45 a.m.•15 views

EUVD-2026-78252

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

4.8CVSS3.7AI score0.00368EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 1:45 a.m.•10 views

CVE-2026-90850 PHPGurukul Hostel Management System manage-students.php cross site scripting

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

4.8CVSS3.8AI score0.00368EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/15 1:45 a.m.•19 views

CVE-2026-90850

CVE-2026-90850 affects PHPGurukul Hostel Management System 3.0 , specifically an unspecified function in the file /admin/manage-students.php . The vulnerability enables cross-site scripting (XSS) via remote manipulation. Exploitation requires high privileges (authenticated admin-level access) and...

4.8CVSS3.8AI score0.00368EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/15 1:45 a.m.•35 views

CVE-2026-90850 PHPGurukul Hostel Management System manage-students.php cross site scripting

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

4.8CVSS0.00368EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•19 views

PT-2026-91845

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

4.8CVSS3.7AI score0.00368EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•2 views

CVE-2026-90850: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

4.8CVSS3.7AI score0.00368EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•3 views

CVE-2026-0733: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impacts an unknown function of the file /onlinecourse/admin/manage-students.php. This manipulation of the argument id/cid causes sql injection. It is possible to initiate the attack remotely. The exploi...

8.8CVSS6.3AI score0.00388EPSS
SaveExploits1References1
OSV
OSV
•added 2025/11/18 7:15 p.m.•15 views

CVE-2025-63955

A Cross-Site Request Forgery CSRF vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of...

7.5CVSS5.7AI score0.00228EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2025/11/18 12:00 a.m.•34 views

CVE-2025-63955

A Cross-Site Request Forgery CSRF vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of...

0.00228EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•0 views

CVE-2025-63955: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of...

7.5CVSS5.8AI score0.00228EPSS
SaveExploits2References1
EUVD
EUVD
•added 2025/10/06 9:02 a.m.•13 views

EUVD-2025-32523

A flaw has been found in code-projects Online Course Registration 1.0. Impacted is an unknown function of the file /admin/manage-students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

7.5CVSS6.4AI score0.00417EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•3 views

CVE-2025-11329: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Online Course Registration 1.0. Impacted is an unknown function of the file /admin/manage-students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

9.8CVSS5.6AI score0.00417EPSS
SaveExploits1References1
OSV
OSV
•added 2025/06/30 3:15 p.m.•17 views

CVE-2025-6912

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been rated as critical. This issue affects some unknown processing of the file /manage-students.php. The manipulation of the argument del leads to sql injection. The attack may be initiated remotely. The exploit has been...

8.8CVSS5.8AI score0.00397EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/06/30 3:02 p.m.•7 views

CVE-2025-6912 PHPGurukul Student Record System manage-students.php sql injection

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been rated as critical. This issue affects some unknown processing of the file /manage-students.php. The manipulation of the argument del leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS6.8AI score0.00397EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/06/30 3:02 p.m.•30 views

CVE-2025-6912 PHPGurukul Student Record System manage-students.php sql injection

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been rated as critical. This issue affects some unknown processing of the file /manage-students.php. The manipulation of the argument del leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00397EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/30 3:02 p.m.•42 views

CVE-2025-6912

CVE-2025-6912 affects PHPGurukul Student Record System 3.2. The vulnerability is a SQL injection in /manage-students.php triggered by manipulating the del argument, enabling remote exploitation. Multiple sources consistently describe the issue as a critical SQL injection with an attacker able to ...

8.8CVSS6.8AI score0.00397EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2025/06/30 12:00 a.m.•13 views

PHPGurukul Student Record System 注入漏洞

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter del in the file /manage-students.php. An attacker can exploit this vulnerability to...

8.8CVSS8.1AI score0.00397EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•3 views

CVE-2025-6912: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been rated as critical. This issue affects some unknown processing of the file /manage-students.php. The manipulation of the argument del leads to sql injection. The attack may be initiated remotely. The exploit has been...

8.8CVSS5.5AI score0.00397EPSS
SaveExploits1References1
OSV
OSV
•added 2024/03/15 6:15 a.m.•17 views

CVE-2024-2481

A vulnerability, which was classified as critical, was found in Surya2Developer Hostel Management System 1.0. Affected is an unknown function of the file /admin/manage-students.php. The manipulation of the argument del leads to improper access controls. It is possible to launch the attack remotel...

6.5CVSS5.5AI score0.00953EPSS
SaveExploits1References3
Rows per page
Query Builder