PT-2025-36427

Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 4.0 Description: A SQL injection flaw exists in PHPGurukul Small CRM version 4.0. The issue is located in the /get-quote.php file, where manipulation of the Contact argument can lead to SQL injection. This attack...

PT-2025-36484

Name of the Vulnerable Software and Affected Versions: PHPGurukul User Management System version 1.0 Description: A security flaw exists in PHPGurukul User Management System 1.0. The issue is related to SQL injection within an unknown function of the file /admin/edit-user-profile.php. The uid...

CVE-2025-10025

A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-57576

PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS in /admin/updateorder.php...

CVE-2025-10025

A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-10025

A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-10025 PHPGurukul Online Course Registration semester.php sql injection

A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-57146

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

CVE-2025-57150

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting XSS in admin/subcategory.php via the categoryName parameter...

CVE-2025-57148

phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation...

PHPGurukul Online Course Registration SQL注入漏洞

Online Course Registration is an online course registration system. A SQL injection vulnerability exists in Online Course Registration due to a lack of validation of externally entered SQL statements by the parameter semester. An attacker can exploit this vulnerability to execute illegal SQL...

PT-2025-36324

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Course Registration version 3.1 Description: A SQL injection issue exists in PHPGurukul Online Course Registration 3.1. The vulnerability is located in an unknown function of the /admin/semester.php file. The semester argume...

CVE-2025-9834

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /registration.php. Executing manipulation of the argument Username can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and...

CVE-2025-9831

A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. This impacts an unknown function of the file /admin/edit-services.php. This manipulation of the argument sername causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2025-9829

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /signup.php. The manipulation of the argument mobilenumber leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly...

CVE-2025-57576

PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS in /admin/updateorder.php...

CVE-2025-57576

PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS in /admin/updateorder.php...

PT-2025-36004

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Shopping Portal version 2.1 Description: PHPGurukul Online Shopping Portal version 2.1 is susceptible to Cross Site Scripting XSS in the /admin/updateorder.php endpoint. Recommendations: As a mitigation, consider implementin...

CVE-2025-57576

CVE-2025-57576 affects the PHPGurukul Online Shopping Portal 2.1, with a Cross-Site Scripting (XSS) vulnerability in the /admin/updateorder.php endpoint. The issue arises from insufficient input validation/escaping of user-supplied data, enabling an attacker to inject and execute arbitrary web sc...

CVE-2025-9932 PHPGurukul Beauty Parlour Management System update-image.php sql injection

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...