Lucene search
+L

6688 matches found

Vulnrichment
Vulnrichment
added 2025/09/27 8:32 a.m.7 views

CVE-2025-11053 PHPGurukul Small CRM forgot-password.php sql injection

A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could b...

7.5CVSS6.7AI score0.00421EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/27 8:32 a.m.32 views

CVE-2025-11053

PHPGurukul Small CRM 4.0 is affected by a SQL injection in the /forgot-password.php file via the email parameter. The vulnerability is exploitable remotely and has public PoCs/exploit code. Remediation visible in connected advisories recommends applying a fix for version 4.0 of PHPGurukul Small C...

9.8CVSS6.7AI score0.00421EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/09/22 2:15 p.m.33 views

CVE-2025-56075

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request...

5.4CVSS0.0026EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/22 11:15 a.m.10 views

CVE-2025-10794

A flaw has been found in PHPGurukul Car Rental Project 3.0. Affected by this issue is some unknown functionality of the file /carrental/search.php. Executing manipulation of the argument autofocus can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

6.1CVSS4.2AI score0.00447EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/22 12:00 a.m.23 views

CVE-2025-56074

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request...

0.00477EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.14 views

PT-2025-38719

Name of the Vulnerable Software and Affected Versions PHPGurukul Park Ticketing Management System version 2.0 Description A SQL Injection issue exists in the foreigner-bwdates-reports-details.php file. This allows remote attackers to execute arbitrary SQL code through the fromdate parameter in a...

9.8CVSS8.2AI score0.00477EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.16 views

PT-2025-38709

Name of the Vulnerable Software and Affected Versions PHPGurukul Car Rental Project version 3.0 Description A flaw exists in the PHPGurukul Car Rental Project version 3.0, specifically within the /carrental/search.php file. Manipulation of the autofocus argument can lead to cross site scripting...

6.1CVSS5.3AI score0.00447EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2025/09/22 12:00 a.m.22 views

CVE-2025-56075

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request...

0.0026EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/20 12:32 p.m.27 views

CVE-2025-10664

A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...

9.8CVSS7.4AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/19 5:33 p.m.13 views

CVE-2025-10604

A vulnerability was identified in PHPGurukul Online Discussion Forum 1.0. This affects an unknown part of the file /admin/editmember.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

9.8CVSS7.1AI score0.00417EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/19 5:33 p.m.9 views

CVE-2025-10603

A vulnerability was determined in PHPGurukul Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /admin/adminforum/searchresult.php. Executing manipulation of the argument Search can lead to sql injection. The attack can be launched remotely. The exploit...

9.8CVSS7.2AI score0.00417EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/18 12:15 p.m.8 views

CVE-2025-10664

A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/18 12:15 p.m.10 views

CVE-2025-10664

A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...

9.8CVSS0.00421EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/18 12:02 p.m.23 views

CVE-2025-10664 PHPGurukul Small CRM create-ticket.php sql injection

A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...

7.5CVSS0.00421EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/18 12:02 p.m.24 views

CVE-2025-10664

CVE-2025-10664 affects PHPGurukul Small CRM 4.0, specifically the file /create-ticket.php. The vulnerability is a SQL injection caused by unsafely handling the subject parameter in an unknown function, enabling remote exploitation. Multiple connected sources confirm that the exploit has been publ...

9.8CVSS6.7AI score0.00421EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/18 12:02 p.m.5 views

CVE-2025-10664 PHPGurukul Small CRM create-ticket.php sql injection

A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...

7.5CVSS7.3AI score0.00421EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/18 11:15 a.m.11 views

CVE-2025-10663

A vulnerability was found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /my-profile.php. Performing manipulation of the argument cgpa results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

9.8CVSS0.00432EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/18 11:15 a.m.10 views

CVE-2025-10663

A vulnerability was found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /my-profile.php. Performing manipulation of the argument cgpa results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

9.8CVSS5.7AI score0.00432EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/18 11:02 a.m.25 views

CVE-2025-10663

CVE-2025-10663 affects PHPGurukul Online Course Registration 3.1, specifically the /my-profile.php cgpa parameter. The root cause is input manipulation that enables SQL injection, with a remote attack surface and a publicly disclosed exploit. Multiple sources confirm the vulnerability and its exp...

9.8CVSS7.2AI score0.00432EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/18 11:02 a.m.24 views

CVE-2025-10663 PHPGurukul Online Course Registration my-profile.php sql injection

A vulnerability was found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /my-profile.php. Performing manipulation of the argument cgpa results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

7.5CVSS0.00432EPSS
SaveExploits1References5
Rows per page
Query Builder