CVE-2025-4907

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2025-4906

A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2025-4906

A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2025-4908 PHPGurukul Daily Expense Tracker System expense-datewise-reports-detailed.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file /expense-datewise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack...

CVE-2025-4908 PHPGurukul Daily Expense Tracker System expense-datewise-reports-detailed.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file /expense-datewise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack...

CVE-2025-4908

The CVE-2025-4908 entry describes a SQL injection in PHPGurukul Daily Expense Tracker System 1.1, arising from unsafely handling the fromdate/todate parameters in /expense-datewise-reports-detailed.php. Attack is remote-enabled and previously disclosed publicly. Connected sources corroborate the ...

CVE-2025-4907 PHPGurukul Daily Expense Tracker System forgot-password.php sql injection

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2025-4907

The CVE-2025-4907 entry affects PHPGurukul Daily Expense Tracker System 1.1. A SQL injection vulnerability exists in the forgot-password.php handling of the email parameter. Descriptions from multiple sources indicate remote exploitation is possible and that exploitation details have been disclos...

CVE-2025-4907 PHPGurukul Daily Expense Tracker System forgot-password.php sql injection

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2025-4906

CVE-2025-4906 affects PHPGurukul Notice Board System v1.0. Affects the login.php file where manipulation of the Username argument enables SQL injection, with remote access and public disclosure of exploits noted across multiple sources. Root cause is an unresolved SQL statement handling in the lo...

CVE-2025-4906 PHPGurukul Notice Board System login.php sql injection

A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2025-4906 PHPGurukul Notice Board System login.php sql injection

A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-51106

The PHPGURUKUL Medical Card Generation System (using PHP and MySQL ) version 1.0 is vulnerable to a cross-site scripting (XSS) vulnerability in the mcgs/admin/aboutus.php component. The root cause is the improper handling of the pagetitle parameter , which allows attackers to inject and execute a...

PT-2025-21997 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue was found in the PHPGurukul Employee Record Management System. The problem affects some unknown functionality of the file /registererms.php. The manipulati...

PT-2025-22019 · Unknown · Phpgurukul Credit Card Application Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Credit Card Application Management System version 1.0 Description: A problematic issue was found in the PHPGurukul Credit Card Application Management System, affecting unknown code of the file /admin/new-ccapplication.php. This iss...

PT-2025-22040 · Unknown · Phpgurukul Credit Card Application Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Credit Card Application Management System version 1.0 Description: A critical vulnerability exists in PHPGurukul Credit Card Application Management System. The issue involves a SQL injection vulnerability within an unknown function...

CVE-2024-51106

A cross-site scripting XSS vulnerability in the component mcgs/admin/aboutus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the pagetitle parameter...

PT-2025-21944 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Medical Card Generation System version 1.0 Description: A cross-site scripting XSS issue exists in the component mcgs/admin/aboutus.php, allowing attackers to execute arbitrary web scripts or HTML by injecting a crafted payload int...

PT-2025-21890 · Unknown · Phpgurukul Auto Taxi Stand Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Auto Taxi Stand Management System version 1.0 Description: A critical issue was found in the system, affecting the /admin/forgot-password.php file. The email argument is vulnerable to sql injection, allowing remote attacks. The iss...

PHPGurukul Daily Expense Tracker System 安全漏洞

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. The Daily Expense Tracker System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the email parameter of the file /forgot-password.php. An...