CVE-2020-25270

CVE-2020-25270 PHPGurukul hostel-management-system 2.1 consente XSS tramite Nome del tutore, Relazione del tutore, Numero di contatto del tutore, Indirizzo, Città Fornitore - PHPGurukul Prodotto -https://phpgurukul.com/hostel-management-system V2.1 Tipo di vulnerabilità - Cross Site Scripting XSS...

CVE-2025-50365_CSRF_DELETE_CATEGORY-phpgurukul-CVE

Nome del progetto e URL del repository: Maid Hiring Management System usando PHP e MySQL Tipo di vulnerabilità: Falsificazione di Richiesta Lato Client Versioni interessate: v1.0 💣Descrizione della vulnerabilità: Una vulnerabilità di Cross-Site Request Forgery CSRF esiste nel pannello di...

CVE-2025-50364_CSRF_ADD_CATEGORY-phpgurukul-CVE

Nome do Projeto e URL do Repositório: Sistema de Gestão de Contratação de Empregadas Domésticas usando PHP e MySQL Tipo de Vulnerabilidade: Client Side Request Forgery Versãoões Afetadas: v1.0 💣Descrição da Vulnerabilidade: Existe uma vulnerabilidade de Cross-Site Request Forgery CSRF no painel d...

CVE-2025-44603-CSRF-Leads_to_Create_FakeUsers

CVE-2025-44603 Vulnerabilità CSRF: Porta alla Creazione di Client Fittizi Project Name & Repo URL : https://phpgurukul.com/client-management-system-using-php-mysql/ Vulnerability Name : Cross-Site Request ForgeryCSRF Affected Version : V1.2 Introduzione Una vulnerabilità di Cross-Site Request...

Hospital Management System 4.0 - SQL Injection

Hospital Management System 4.0 contains multiple SQL injection vulnerabilities because multiple pages and parameters do not validate user input. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of...

Dairy Farm Shop Management System 1.0 - SQL Injection

Dairy Farm Shop Management System 1.0 contains multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context ...

Diary Management System 1.0 - Cross-Site Scripting

Diary Management System 1.0 contains a cross-site scripting vulnerability via the Name parameter in search-result.php. id: CVE-2022-29004 info: name: Diary Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Diary Management System 1.0 contains a cross-sit...

Cyber Cafe Management System 1.0 - SQL Injection

Cyber Cafe Management System 1.0 contains multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of th...

PHPGurukul Hospital Management System - Cross-Site Scripting

PHPGurukul Hospital Management System in PHP 4.0 contains multiple cross-site scripting vulnerabilities. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2020-5191 info: name: PHPGurukul Hospital Management System -...

PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName and ProductPrice parameters in...

Old Age Home Management System v1.0 - SQL Injection

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter. id: CVE-2023-33338 info: name: Old Age Home Management System v1.0 - SQL Injection author: Harsh severity: critical description: | Old Age Home Management 1.0 is vulnerable to SQL Injection via the username...

Bank Locker Management System v1.0 - SQL Injection

A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. id: CVE-2023-0562 info:...

Online Birth Certificate System 1.2 - Stored Cross-Site Scripting

Online Birth Certificate System 1.2 contains multiple stored cross-site scripting vulnerabilities in the component /obcs/user/profile.php, which allows an attacker to execute arbitrary web script or HTML via a crafted payload injected into the fname or lname parameters. id: CVE-2022-29005 info:...

Directory Management System 1.0 - SQL Injection

Directory Management System 1.0 contains multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the...

cve-2025-9933

🔒 Credenziali per il pannello di amministrazione Username: admin Password: Test@123 Username: [email protected] Password: Test@123 Oppure registra un nuovo utente. Descrizione È stata trovata una vulnerabilità in PHPGurukul Beauty Parlour Management System 1.1. Interessata da questo problema...

CVE-2025-51820

CVE-2025-51820 È stata scoperta una vulnerabilità critica di esecuzione remota di codice RCE CVE-2025-51820 nello Shopping Portal v1.0. 🚨 Esecuzione Remota di Codice in Online Shopping Portal Project v1.0 CVE-2025-51820 🔍 Introduzione Nel mondo digitale di oggi, l'Esecuzione Remota di Codice RCE...

DWrwq

Beschreibung PHPGurukul Online Shopping Portal 2.1 ist anfällig für Cross-Site-Scripting XSS in /admin/updateorder.php. Schwachstellenübersicht 1.Schwachstellenart: Stored Cross-Site Scripting XSS 2.Betroffenes Produkt: Online Shopping Portal Project - 2.1 3.Betroffene Komponente:...

CVE-2022-43097

CVE-2022-43097 Tutti i dettagli su CVE-2022-43097 Software: Phpgurukul User Registration & User Management System v3.0 Link del software: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/ Descrizione: È stato scoperto che Phpgurukul User Registration & Us...

CVE-2025-45805

CVE-2025-45805 PoC di CVE-2025-45805 Prodotto interessato: Doctor Appointment Management System Vendor: phpgurukul Versione: 1.0 Tipo di vulnerabilità: Stored Cross-Site Scripting XSS Descrizione: Un medico autenticato può iniettare codice JavaScript arbitrario nel campo del profilo del medico...

CVE-2025-70899

Questo repository contiene la Proof of Concept che dimostra la vulnerabilità di protezione CSRF mancante nel PHPgurukul Online Course Registration System. 📄 Visualizza la PoC completa qui: MissingCSRFprotectionpoc.md...