250 matches found
CVE-2024-44664
PHPGurukul Online Shopping Portal 2.0 is affected by an SQL Injection in product-details.php. The vulnerability arises from lack of input validation for the name, summary, review, quality, price, and value parameters, allowing an attacker to alter SQL queries executed by the application. Based on...
CVE-2024-44657
PHPGurukul Complaint Management System 2.0 is affected by a SQL Injection vulnerability in the between-date-userreport.php file, caused by lack of validation for the fromdate and todate parameters. The root cause is unsanitized input that can allow unauthorized SQL execution and data access/modif...
CVE-2024-44640
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...
CVE-2024-44633
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php...
PT-2025-46960
Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.20 Description The PHPGurukul Student Record System is affected by a SQL Injection issue. This issue occurs via the currentpassword parameter in the 'change-password.php' file. Exploitation of this...
EUVD-2024-55080
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...
CVE-2024-44630
CVE-2024-44630 affects PHPGurukul Student Record System 3.20. The vulnerability is an SQL injection in the file register.php due to insufficient input validation for multiple parameters: c-full, fname, mname, lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, s...
EUVD-2024-55079
PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php...
CVE-2025-12616
A vulnerability was detected in PHPGurukul News Portal 1.0. The impacted element is an unknown function of the file /onps/settings.py. Performing a manipulation results in insertion of sensitive information into debugging code. It is possible to initiate the attack remotely. The attack's complexi...
EUVD-2025-37472
A vulnerability was detected in PHPGurukul News Portal 1.0. The impacted element is an unknown function of the file /onps/settings.py. Performing manipulation results in insertion of sensitive information into debugging code. It is possible to initiate the attack remotely. The attack's complexity...
CVE-2025-12303
A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing a manipulation of the argument adminname/email can lead to cross site scripting. The attack may be launched remotely. The exploit has been...
PT-2025-44003
Name of the Vulnerable Software and Affected Versions PHPGurukul Curfew e-Pass Management System version 1.0 Description A flaw exists in PHPGurukul Curfew e-Pass Management System version 1.0. Manipulation of the adminname/email argument within an unknown function of the admin-profile.php file c...
EUVD-2025-33279
A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/new-appointment.php. The manipulation of the argument delid leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availab...
CVE-2025-11503 PHPGurukul Beauty Parlour Management System manage-services.php sql injection
A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-services.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has...
CVE-2025-11503
PHPGurukul Beauty Parlour Management System 1.1 contains a SQL injection in the /admin/manage-services.php file via manipulation of the delid parameter. Multiple sources confirm remote exploitation and publicly disclosed exploit details, indicating potential data theft from the database. The vuln...
CVE-2025-11390
Summary of CVE-2025-11390 impact : PHPGurukul Cyber Cafe Management System 1.0 contains a cross-site scripting vulnerability in the POST Parameter Handler’s /search.php file, caused by unsafely handling the searchdata parameter. Exploitation can be conducted remotely and public exploits exist. Th...
PT-2025-41196
Name of the Vulnerable Software and Affected Versions PHPGurukul Beauty Parlour Management System version 1.1 Description A SQL injection issue exists in PHPGurukul Beauty Parlour Management System version 1.1. The issue is located in the /admin/customer-list.php file. Manipulation of the delid...
EUVD-2025-29189
Malicious code in bioql PyPI...