CVE-2025-4039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...

CVE-2025-45953

A Session Hijacking vulnerability exists in PHPGurukul Hostel Management System version 2.1 . The issue is caused by improper handling of session data within the /hostel/change-password.php file, which is part of the Change Password component in the user panel. This flaw allows for remote exploit...

CVE-2025-45953

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely...

CVE-2025-4013: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The explo...

PT-2025-18057 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.0 Description: A critical issue was found in the PHPGurukul Art Gallery Management System. The problem affects an unknown function of the file /admin/aboutus.php. Manipulation of the pagetitl...

PT-2025-18119 · Unknown · Phpgurukul Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Rail Pass Management System version 1.0 Description: A critical issue was found in the PHPGurukul Rail Pass Management System. The problem affects an unknown functionality of the file /admin/search-pass.php. The manipulation of the...

CVE-2025-45953

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely...

PT-2025-18092 · Unknown · Phpgurukul Old Age Home Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Old Age Home Management System version 1.0 Description: A critical issue was found in the PHPGurukul Old Age Home Management System, affecting an unknown function of the file /admin/rules.php. The manipulation of the pagetitle...

PHPGurukul Online Banquet Booking System 安全漏洞

PHPGurukul Online Banquet Booking System is an online banquet booking system from PHPGurukul Inc. A security vulnerability exists in version V1.2 of the PHPGurukul Online Banquet Booking System that stems from improper handling of the file /obbs/change-password.php, which could lead to the...

CVE-2025-45947

The phpgurukul Online Banquet Booking System V1.2 is vulnerable to arbitrary code execution due to improper handling of the /obbs/change-password.php file within the My Account - Change Password component. Successful exploitation could lead to unauthorized access and control of the system . To mi...

PT-2025-18111 · Unknown · Phpgurukul Online Banquet Booking System

Name of the Vulnerable Software and Affected Versions: phpgurukul Online Banquet Booking System version 1.2 Description: The issue allows an attacker to execute arbitrary code via the "/obbs/change-password.php" file of the My Account - Change Password component. This could potentially lead to...

CVE-2025-4028: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched...

CVE-2025-4027: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/rules.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-45949: Session Fixation

A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and...

PT-2025-18098 · Unknown · Phpgurukul Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID19 Testing Management System version 1.0 Description: A critical vulnerability was found in PHPGurukul COVID19 Testing Management System. This affects an unknown part of the file /search-report-result.php. The manipulation of...

CVE-2025-4004: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. The attack can be initiated...

PHPGurukul COVID19 Testing Management System 安全漏洞

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchdata in the file...

PHPGurukul COVID19 Testing Management System 注入漏洞

The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter contactno in the file...

CVE-2025-4020: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /contact.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely. The exploit has...

PT-2025-18046 · Unknown · Phpgurukul Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID19 Testing Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul COVID19 Testing Management System. This issue affects unknown code in the file /password-recovery.php. The manipulation...