CVE-2025-50370

A Cross-Site Request Forgery CSRF vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring ...

PT-2025-27238 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Medical Card Generation System version 1.0 Description: A Cross-Site Request Forgery CSRF issue exists in the Inquiry Management functionality, specifically at the "/mcgs/admin/readenq.php" endpoint. This allows an authenticated...

CVE-2025-6570

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 4.0. Affected by this issue is some unknown functionality of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched...

CVE-2025-51671

A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability allows remote attackers to execute arbitrary SQL code via the category and categorycode parameters in a POST request to the manage-categories.php file...

CVE-2025-50350

PHPGurukul Pre-School Enrollment System Project v1.0 is vulnerable to Directory Traversal in manage-classes.php...

CVE-2025-51672

A time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability exists in the manage-companies.php file and allows remote attackers to execute arbitrary SQL code via the companyname parameter in a POST request...

CVE-2025-50695

PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting XSS in /admin/view-booking-detail.php and /admin/invoice-generating.php...

CVE-2025-50699

PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting XSS in odms/admin/view-user-queries.php...

CVE-2025-50693

PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Insecure Direct Object Reference IDOR in odms/request-details.php...

CVE-2025-51671

A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability allows remote attackers to execute arbitrary SQL code via the category and categorycode parameters in a POST request to the manage-categories.php file...

CVE-2025-51671

A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability allows remote attackers to execute arbitrary SQL code via the category and categorycode parameters in a POST request to the manage-categories.php file...

CVE-2025-50350

PHPGurukul Pre-School Enrollment System Project v1.0 is vulnerable to Directory Traversal in manage-classes.php...

PT-2025-26984 · Unknown · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop Management System. The vulnerability exists in the manage-companies.php file...

PT-2025-26983 · Unknown · Phpgurukul Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A SQL injection issue was discovered, allowing remote attackers to execute arbitrary SQL code. This is achieved via the category and categorycode parameters in a POST reque...

CVE-2025-51672

A time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability exists in the manage-companies.php file and allows remote attackers to execute arbitrary SQL code via the companyname parameter in a POST request...

CVE-2025-51671

The CVE-2025-51671 entry concerns PHPGurukul Dairy Farm Shop Management System 1.3, where a SQL injection vulnerability exists in manage-categories.php. The issue arises from insufficient validation of inputs for the POST parameters category and categorycode, allowing remote attackers to craft SQ...

CVE-2025-51672

Summary: CVE-2025-51672 affects PHPGurukul Dairy Farm Shop Management System 1.3, in the file manage-companies.php . The vulnerability is a time-based blind SQL injection that allows remote attackers to execute arbitrary SQL via the companyname parameter in a POST request. The weakness originates...

CVE-2025-51672

A time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability exists in the manage-companies.php file and allows remote attackers to execute arbitrary SQL code via the companyname parameter in a POST request...

CVE-2025-50350

CVE-2025-50350 affects PHPGurukul Pre-School Enrollment System Project v1.0. The issue is a directory traversal vulnerability in manage-classes.php caused by insufficient path validation, enabling an attacker to access sensitive files. CVSS details: AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N; base score...

PT-2025-26987 · Unknown · Phpgurukul Pre-School Enrollment System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Pre-School Enrollment System Project version 1.0 Description: The issue concerns a Directory Traversal vulnerability in the manage-classes.php file. Recommendations: For PHPGurukul Pre-School Enrollment System Project version 1.0,...