CVE-2022-41445

CVE-2022-41445 Cross Site Scripting en el Sistema de Gestión de Registros de Profesores usando CodeIgnitor Descripción sugerida Una vulnerabilidad de cross-site scripting XSS en el Sistema de Gestión de Registros que usa CodeIgniter 1.0 permite a los atacantes ejecutar scripts web arbitrarios o...

CVE-2025-44603-CSRF-Leads_to_Create_FakeUsers

CVE-2025-44603 Vulnerabilidad CSRF: Permite Crear Clientes Falsos Nombre del Proyecto y URL del Repositorio :https://phpgurukul.com/client-management-system-using-php-mysql/ Nombre de la Vulnerabilidad : Cross-Site Request Forgery CSRF Versión Afectada : V1.2 Introducción Existe una vulnerabilida...

CVE-2025-25965

CVE-2025-25965: Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.2 Introduction Cross-Site Request Forgery CSRF remains one of the most overlooked yet dangerous vulnerabilities affecting web applications today. CVE-2025-25965 is a newly discovered CSRF vulnerability in the...

CVE-2024-9326-PoC

CVE-2024-9326 PoC Exploit Script This PoC script is designed to verify the presence of CVE-2024-9326, a high SQL Injection vulnerability in PHPGurukul Online Shopping Portal v2.0. It automates the exploitation process to determine if the target web application is vulnerable, allowing security...

CVE-2024-30998

PHPGurukul Men Salon Management System 2.0 Welcome to the PHPGurukul Men Salon Management System 2.0 repository. This project aims to provide a robust system for Men Salon Management. Security Vulnerabilities CVE-2024-30998 Description: Vulnerable to SQL Injection via 'email' parameter. Affected...

CVE-2024-35511

PHPGurukul Men Salon Management System 2.0 Welcome to the PHPGurukul Men Salon Management System 2.0 repository. This project aims to provide a robust system for Men Salon Management. Security Vulnerabilities CVE-2024-35511 Description: Vulnerable to SQL Injection via 'username' parameter. Affect...

CVE-2024-39090-PoC

CVE-2024-39090 PoC Exploit Script This PoC script exploits CVE-2024-39090, a CSRF to Stored XSS vulnerability in PHPGurukul Online Shopping Portal v2.0. It automates CSRF attacks to inject persistent JavaScript payloads, which execute when a privileged user accesses the affected page, enabling...

CVE-2020-25270

CVE-2020-25270 PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, City Vendor - PHPGurukul Product -https://phpgurukul.com/hostel-management-system V2.1 Vulnerability Type - Cross Site Scripting XSS Addition Information - XSS wil...

cve-2025-9933

🔒 管理者パネルの認証情報 ユーザー名: admin パスワード: Test@123 ユーザー名: [email protected] パスワード: Test@123 または新しいユーザーを登録してください。 説明 PHPGurukul Beauty Parlour Management System 1.1 に脆弱性が発見されました。この問題の影響を受けるのは、/admin/view-appointment.php ファイルの未知の機能です。引数 viewid...

CVE-2025-45805

CVE-2025-45805 Poc Of CVE-2025-45805 Affected Product: Doctor Appointment Management System Vendor: phpgurukul Version: 1.0 Vulnerability Type: Stored Cross-Site Scripting XSS Description: An authenticated doctor user can inject arbitrary JavaScript code into the doctor profile field name/employe...

CVE-2022-40470

CVE-2022-40470 Cross Site Scripting en el Sistema de Gestión de Donantes de Sangre usando CodeIgniter - 1.0 Descripción sugerida Phpgurukul Sistema de Gestión de Donantes de Sangre 1.0 permite Cross Site Scripting a través de la función Agregar Nombre de Grupo Sanguíneo. Información Adicional PoC...

DWrwq

Descripción PHPGurukul Online Shopping Portal 2.1 es vulnerable a Cross Site Scripting XSS en /admin/updateorder.php. Resumen de la Vulnerabilidad 1.Tipo de Vulnerabilidad: Cross-Site Scripting Almacenado XSS 2.Producto Afectado: Online Shopping Portal Project - 2.1 3.Componente Afectado:...

Hospital Management System 4.0 - SQL Injection

Hospital Management System 4.0 contains multiple SQL injection vulnerabilities because multiple pages and parameters do not validate user input. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of...

Diary Management System 1.0 - Cross-Site Scripting

Diary Management System 1.0 contains a cross-site scripting vulnerability via the Name parameter in search-result.php. id: CVE-2022-29004 info: name: Diary Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Diary Management System 1.0 contains a cross-sit...

PHPGurukul Hospital Management System - Cross-Site Scripting

PHPGurukul Hospital Management System in PHP 4.0 contains multiple cross-site scripting vulnerabilities. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2020-5191 info: name: PHPGurukul Hospital Management System -...

PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName and ProductPrice parameters in...

Cyber Cafe Management System 1.0 - SQL Injection

Cyber Cafe Management System 1.0 contains multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of th...

Dairy Farm Shop Management System 1.0 - SQL Injection

Dairy Farm Shop Management System 1.0 contains multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context ...

Bank Locker Management System v1.0 - SQL Injection

A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. id: CVE-2023-0562 info:...

Old Age Home Management System v1.0 - SQL Injection

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter. id: CVE-2023-33338 info: name: Old Age Home Management System v1.0 - SQL Injection author: Harsh severity: critical description: | Old Age Home Management 1.0 is vulnerable to SQL Injection via the username...