Lucene search
+L

28 matches found

RedhatCVE
RedhatCVE
added 2026/04/14 1:22 a.m.7 views

CVE-2025-51414

In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...

8.8CVSS5.9AI score0.00305EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/13 9:30 p.m.9 views

EUVD-2025-209427

In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...

5.9AI score0.00305EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/13 12:0 a.m.2 views

CVE-2025-51414

In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...

5.9AI score0.00305EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/13 12:0 a.m.17 views

CVE-2025-51414

In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...

0.00305EPSS
Exploits0References2
CVE
CVE
added 2026/04/13 12:0 a.m.8 views

CVE-2025-51414

Phpgurukul Online Course Registration v3.1 is affected by an arbitrary file upload vulnerability in the profile picture upload at /my-profile.php. The CVE details indicate a high-severity issue (CVSS 3.1: 8.8) with network access and low attacker/authentication requirements, enabling total impact...

8.8CVSS5.9AI score0.00305EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/13 12:0 a.m.5 views

PT-2026-32514

Name of the Vulnerable Software and Affected Versions Phpgurukul Online Course Registration version 3.1 Description An arbitrary file upload issue exists within the profile picture upload functionality on the '/my-profile.php' page. Recommendations At the moment, there is no information about a...

8.8CVSS5.9AI score0.00305EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/13 12:0 a.m.3 views

CVE-2025-51414

In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...

5.9AI score0.00305EPSS
Exploits0References2
NVD
NVD
added 2026/04/05 5:16 p.m.11 views

CVE-2026-5583

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...

6.5CVSS0.00246EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/05 4:30 p.m.9 views

CVE-2026-5583 PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...

6.5CVSS6.5AI score0.00246EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-32945

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.0059EPSS
Exploits1References5
NVD
NVD
added 2025/09/18 11:15 a.m.6 views

CVE-2025-10663

A vulnerability was found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /my-profile.php. Performing manipulation of the argument cgpa results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

9.8CVSS0.00398EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/09/18 12:0 a.m.6 views

PHPGurukul Online Course Registration SQL注入漏洞

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cgpa in the file /my-profile.php. An attacker can exploit thi...

9.8CVSS8.2AI score0.00398EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/10/19 11:31 p.m.23 views

CVE-2024-10159 PHPGurukul Boat Booking System My Profile Page profile.php sql injection

A vulnerability classified as critical was found in PHPGurukul Boat Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php of the component My Profile Page. The manipulation of the argument sadminusername/fullname/emailid/mobilenumber leads t...

7.5CVSS0.0059EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/10/19 11:31 p.m.18 views

CVE-2024-10159 PHPGurukul Boat Booking System My Profile Page profile.php sql injection

A vulnerability classified as critical was found in PHPGurukul Boat Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php of the component My Profile Page. The manipulation of the argument sadminusername/fullname/emailid/mobilenumber leads t...

7.5CVSS7.6AI score0.0059EPSS
Exploits1References5
OSV
OSV
added 2023/12/07 11:15 p.m.3 views

CVE-2023-4122

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

8.8CVSS5.9AI score0.01501EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/12/07 11:10 p.m.20 views

CVE-2023-4122 Student Information System v1.0 - Insecure File Upload

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

9.9CVSS9.7AI score0.01501EPSS
Exploits1References2
NVD
NVD
added 2023/07/04 3:15 p.m.22 views

CVE-2023-3504

A vulnerability was found in SmartWeb Infotech Job Board 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /settings/account of the component My Profile Page. The manipulation of the argument filename leads to unrestricted upload. The attack may be...

9.8CVSS7AI score0.00536EPSS
Exploits0References2
Prion
Prion
added 2023/07/04 3:15 p.m.27 views

Design/Logic Flaw

A vulnerability was found in SmartWeb Infotech Job Board 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /settings/account of the component My Profile Page. The manipulation of the argument filename leads to unrestricted upload. The attack may be...

6.5CVSS9.2AI score0.00536EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/07/04 3:0 p.m.33 views

CVE-2023-3504 SmartWeb Infotech Job Board My Profile Page account unrestricted upload

A vulnerability was found in SmartWeb Infotech Job Board 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /settings/account of the component My Profile Page. The manipulation of the argument filename leads to unrestricted upload. The attack may be...

6.5CVSS9.6AI score0.00536EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/07/04 12:0 a.m.3 views

PT-2023-25110 · Smartweb Infotech · Smartweb Infotech Job Board

Name of the Vulnerable Software and Affected Versions: SmartWeb Infotech Job Board version 1.0 Description: A critical issue affects some unknown functionality of the file /settings/account of the component My Profile Page. The manipulation of the filename argument leads to unrestricted upload. T...

9.8CVSS6.5AI score0.00536EPSS
Exploits0References4
Rows per page
Query Builder