101 matches found
CVE-2026-90519 PHPGurukul Bank Locker Management System add-locker-form.php unrestricted upload
A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. This manipulation of the argument addressproof causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-90517 PHPGurukul Bank Locker Management System view-assign-locker.php authorization
A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The manipulation of the argument ltid leads to authorization bypass. The attack may be initiated remotely. The exploit is publicly available a...
EUVD-2026-77005
A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The manipulation of the argument ltid leads to authorization bypass. The attack may be initiated remotely. The exploit is publicly available a...
CVE-2026-90519: Unrestricted Upload of File with Dangerous Type
A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. This manipulation of the argument addressproof causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-90517: Authorization Bypass Through User-Controlled Key
A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The manipulation of the argument ltid leads to authorization bypass. The attack may be initiated remotely. The exploit is publicly available a...
CVE-2026-90518: Improper Access Control
A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. The attack may be launched remotely. The exploit has been released to the...
CVE-2025-61255: Improper Neutralization of Input During Web Page Generation
Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting XSS vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML and JavaScript injection, potentially resulting in information disclosure and user redirection...
EUVD-2023-24150
Malicious code in bioql PyPI...
EUVD-2025-22935
Malicious code in bioql PyPI...
EUVD-2025-7340
Malicious code in bioql PyPI...
EUVD-2025-7335
Malicious code in bioql PyPI...
EUVD-2025-7341
Malicious code in bioql PyPI...
EUVD-2023-24149
Malicious code in bioql PyPI...
EUVD-2025-7333
Malicious code in bioql PyPI...
EUVD-2025-7336
Malicious code in bioql PyPI...
EUVD-2025-7339
Malicious code in bioql PyPI...
CVE-2025-50491
Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...
CVE-2025-50491
The PHPGurukul Bank Locker Management System v1 is vulnerable to a session hijacking attack due to improper session invalidation in the /banker/change-password.php component. This flaw allows attackers to potentially seize active user sessions. Remediation involves addressing the session invalida...
PT-2025-31141 · Unknown · Phpgurukul Bank Locker Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1 Description: Improper session invalidation in the /banker/change-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session invalidati...
CVE-2025-50491: Insufficient Session Expiration
Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...