CVE-2024-44636: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php...

CVE-2024-44635

PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting XSS via adminname and aemailid parameters in /admin-profile.php...

EUVD-2024-55077

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php...

PHPGurukul Student Record System security vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the adminname and aemailid parameters of admin-profile.php. An attacker can exploit this vulnerability t...

CVE-2024-44635

PHPGurukul Student Record System version 3.20 is vulnerable to a Cross-Site Scripting (XSS) flaw within the /admin-profile.php file. The root cause is the lack of effective filtering and escaping of user-supplied data provided via the adminname and aemailid parameters. An attacker could exploit t...

CVE-2024-44636

PHPGurukul Student Record System version 3.20 is vulnerable to SQL Injection within the /admin-profile.php endpoint. The root cause is the lack of validation for externally entered SQL statements in the adminname and aemailid parameters. An attacker can exploit this flaw to execute unauthorized S...

Curfew e-Pass Management System admin-profile.php file cross-site scripting vulnerability

Curfew e-Pass Management System is an electronic pass management system. Curfew e-Pass Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter adminname or email in the file...

CVE-2025-12303

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing a manipulation of the argument adminname/email can lead to cross site scripting. The attack may be launched remotely. The exploit has been...

EUVD-2025-36230

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing manipulation of the argument adminname/email can lead to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2025-12303

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing a manipulation of the argument adminname/email can lead to cross site scripting. The attack may be launched remotely. The exploit has been...

PT-2025-44003

Name of the Vulnerable Software and Affected Versions PHPGurukul Curfew e-Pass Management System version 1.0 Description A flaw exists in PHPGurukul Curfew e-Pass Management System version 1.0. Manipulation of the adminname/email argument within an unknown function of the admin-profile.php file c...

CVE-2025-12303: Improper Neutralization of Input During Web Page Generation

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing a manipulation of the argument adminname/email can lead to cross site scripting. The attack may be launched remotely. The exploit has been...

EUVD-2025-12725

Malicious code in bioql PyPI...

Time Table Generator System Cross-Site Scripting Vulnerability

Time Table Generator System is a time table generator system. A cross-site scripting vulnerability exists in Time Table Generator System, which stems from the adminname parameter in the /admin/profile.php file not effectively filtering user input. No details of the vulnerability are available at...

Online Banquet Booking System Cross-Site Scripting Vulnerability

Online Banquet Booking System is an online banquet booking system. A cross-site scripting vulnerability exists in Online Banquet Booking System, which originates from the failure to strictly filter the adminname parameter in the /admin/admin-profile.php file. An attacker can exploit this...

CVE-2025-7942

A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack can be...

CVE-2025-7941

A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...

CVE-2025-7924

A vulnerability classified as problematic was found in PHPGurukul Online Banquet Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack can be launche...

PHPGurukul Online Banquet Booking System Security Vulnerability

Online Banquet Booking System is an online banquet booking system. A cross-site scripting vulnerability exists in Online Banquet Booking System, which originates from the failure to strictly filter the adminname parameter in the /admin/admin-profile.php file. An attacker can exploit this...

PHPGurukul Taxi Stand Management System: Code Injection Vulnerability

Taxi Stand Management System is a cab stand management system. The Taxi Stand Management System suffers from a cross-site scripting vulnerability that originates from the adminname parameter in the /admin/admin-profile.php file not effectively filtering user input. An attacker can exploit this...