CVE-2025-2374: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument aid/adminname/mobilenumber/email leads to sql injection. The...

CVE-2025-29427: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...

CVE-2025-2380: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. T...

PT-2025-11190

Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System version V3.3 Description: A HTML Injection issue was found in the loginsystem/edit-profile.php file, allowing remote attackers to execute arbitrary HTML code via the fname, lname...

Online Class and Exam Scheduling System profile.php file cross-site scripting vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter username in the file...

CVE-2025-28015: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary HTML code via the fname, lname, and contact parameters...

PT-2025-10031

Name of the Vulnerable Software and Affected Versions PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description A critical vulnerability was found in the PHPGurukul Emergency Ambulance Hiring Portal. This issue affects an unknown part of the file /admin/admin-profile.php. The...

PT-2025-10090

Name of the Vulnerable Software and Affected Versions PHPGurukul Pre-School Enrollment System versions up to 1.0 Description A critical issue was found in the system, affecting an unknown function of the file /admin/profile.php. The manipulation of the fullname, emailid, or mobileNumber arguments...

CVE-2025-2088: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System up to 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument fullname/emailid/mobileNumber leads to sql injection. It is possible to launch the...

CVE-2025-2060: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack...

CVE-2025-1955 code-projects Online Class and Exam Scheduling System profile.php cross site scripting

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the argument username leads to cross site...

CVE-2025-1906 PHPGurukul Restaurant Table Booking System profile.php sql injection

A vulnerability has been found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-1906 PHPGurukul Restaurant Table Booking System profile.php sql injection

A vulnerability has been found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-1906: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-1955: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the argument username leads to cross site...

PT-2025-9708

Name of the Vulnerable Software and Affected Versions code-projects Online Class and Exam Scheduling System version 1.0 Description A issue was found in the system, affecting some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the username argument...

PT-2025-9627

Name of the Vulnerable Software and Affected Versions PHPGurukul Restaurant Table Booking System version 1.0 Description A critical vulnerability has been found in the PHPGurukul Restaurant Table Booking System. This issue affects unknown code of the file /admin/profile.php. The manipulation of t...

PT-2025-7603

Name of the Vulnerable Software and Affected Versions PHPGurukul Art Gallery Management System version 1.0 Description A critical vulnerability was found in the PHPGurukul Art Gallery Management System. The issue affects an unknown functionality of the file /admin/admin-profile.php. The...

Wazifa System profile.php file cross-site scripting vulnerability

Wazifa System is a content management system. Wazifa System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter postcontent in the /profile.php file, which can be exploited to execute arbitrary Web...

CVE-2025-25354: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was found in /admin/admin-profile.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactnumber POST request parameter...