Lucene search
+L
PhpgurukulApartment Visitors Management System

21 matches found

CVE
CVE
added 2025/05/12 12:00 a.m.107 views

CVE-2025-4553

CVE-2025-4553 concerns a SQL injection in PHPGurukul Apartment Visitors Management System 1.0, triggered by improper handling of the fromdate/todate parameters in /admin/bwdates-reports-details.php. The issue allows remote exploitation and has been publicly disclosed. Multiple connected sources c...

9.8CVSS7.4AI score0.00507EPSS
SaveWeb
CVE
CVE
added 2025/05/11 10:31 p.m.84 views

CVE-2025-4550

The CVE-2025-4550 entry concerns PHPGurukul Apartment Visitors Management System 1.0. A vulnerability exists in the processing of the file /admin/pass-details.php where manipulating the pid parameter leads to SQL injection. Multiple sources describe this as a remote exploit that can disclose or t...

9.8CVSS7.5AI score0.00525EPSS
SaveWeb
CVE
CVE
added 2025/05/12 12:31 a.m.80 views

CVE-2025-4554

PHPGurukul Apartment Visitors Management System 1.0 is affected by a SQL injection in /admin/bwdates-passreports-details.php, triggered by manipulating the fromdate/todate parameters. Several sources describe remote exploitation with a disclosed exploit public. The vulnerability is categorized as...

9.8CVSS7.5AI score0.00507EPSS
SaveWeb
CVE
CVE
added 2025/05/10 3:31 p.m.78 views

CVE-2025-4505

The CVE-2025-4505 entry concerns PHPGurukul Apartment Visitors Management System v1.0. The vulnerability is in the /category.php functionality, where manipulating the categoryname argument triggers an SQL injection. Exploitation is possible remotely, and multiple sources note that the exploit has...

9.8CVSS7.5AI score0.00507EPSS
Save
CVE
CVE
added 2025/03/07 12:31 a.m.75 views

CVE-2025-2053

The CVE-2025-2053 entry concerns PHPGurukul Apartment Visitors Management System 1.0. The vulnerability affects an unknown function in /visitor-detail.php where manipulating the editid parameter enables SQL injection. Reports consistently describe remote exploitation and public disclosure of the ...

8.8CVSS7.6AI score0.00501EPSS
Save
CVE
CVE
added 2025/03/07 12:00 a.m.73 views

CVE-2025-2052

The CVE-2025-2052 entry concerns PHPGurukul Apartment Visitors Management System 1.0. The vulnerability is a SQL injection via the contactno parameter in forgot-password.php, enabling remote exploitation. Multiple sources (NVD, Red Hat, CNVD, CNNVD, CVE lists) describe the issue with public explo...

8.8CVSS7.7AI score0.00439EPSS
Save
CVE
CVE
added 2025/03/17 2:00 p.m.71 views

CVE-2025-2380

The CVE-2025-2380 entry corresponds to a SQL injection in PHPGurukul Apartment Visitors Management System 1.0, triggered by manipulating the mobilenumber parameter in /admin-profile.php. Various sources (NVD entry and national vulnerability databases) confirm unauthenticated remote exploitation w...

9.8CVSS7.4AI score0.00534EPSS
Save
CVE
CVE
added 2025/03/17 11:31 p.m.69 views

CVE-2025-2472

CVE-2025-2472 concerns PHPGurukul Apartment Visitors Management System 1.0. Multiple connected sources describe a SQL injection in the Sign In function, via manipulating the username parameter of /index.php, which can be exploited remotely without authentication. The vulnerability is described as...

9.8CVSS7.5AI score0.00534EPSS
Save
CVE
CVE
added 2025/04/02 9:31 p.m.68 views

CVE-2025-3120

The CVE describes an SQL injection in SourceCodester Apartment Visitors Management System 1.0 via the apartmentno parameter in /add-apartment.php. Exploitation can be remote and the vulnerability may affect multiple parameters. Exploitation status is not consistently documented across connected s...

9.8CVSS7.6AI score0.00558EPSS
Save
CVE
CVE
added 2025/03/07 12:00 a.m.64 views

CVE-2025-2051

The CVE-2025-2051 entry relates to PHPGurukul Apartment Visitors Management System 1.0 and a SQL injection in the searchdata parameter of /search-visitor.php. The flaw allows remote exploitation and is caused by improper validation/external SQL statement handling. Public disclosure is noted. Conn...

8.8CVSS7.8AI score0.00439EPSS
Save
CVE
CVE
added 2025/03/17 1:31 p.m.62 views

CVE-2025-2379

CVE-2025-2379 concerns PHPGurukul Apartment Visitors Management System 1.0. The vulnerability exists in the unknown code path of the file /create-pass.php , where manipulating the visname parameter leads to a SQL injection . The issue is exploitable remotely and the exploit has been disclosed pub...

9.8CVSS7.6AI score0.00534EPSS
Save
CVE
CVE
added 2025/05/15 2:00 p.m.47 views

CVE-2025-4699

CVE-2025-4699 affects PHPGurukul Apartment Visitors Management System 1.0, with SQL injection in /admin/visitors-form.php via the Category parameter. Remote exploitation is possible and the vulnerability has been disclosed publicly. Multiple connected sources (NVD/Red Hat/CNVD/CVE listings) descr...

9.8CVSS7.6AI score0.00514EPSS
SaveWeb
CVE
CVE
added 2025/07/22 12:02 a.m.41 views

CVE-2025-7946

CVE-2025-7946 affects PHPGurukul Apartment Visitors Management System 1.0. The vulnerability is a cross-site scripting flaw in the HTTP POST Request Handler, triggered by manipulating the searchdata argument processed in /search-visitor.php. Remote exploitation is possible, and public exploit inf...

6.1CVSS4.5AI score0.00445EPSS
Save
CVE
CVE
added 2025/07/19 9:14 p.m.36 views

CVE-2025-7856

CVE-2025-7856 affects PHPGurukul Apartment Visitors Management System 1.0. The vulnerability is in the HTTP POST Request Handler, specifically the pass-details.php file, where manipulating the parameter visname triggers a cross-site scripting (XSS) condition. The attack can be launched remotely, ...

5.4CVSS3.9AI score0.0032EPSS
Save
CVE
CVE
added 2025/07/19 9:32 a.m.34 views

CVE-2025-7815

PHPGurukul Apartment Visitors Management System 1.0 is affected by CVE-2025-7815 due to an XSS flaw in the HTTP POST Request Handler. The visname parameter in /manage-newvisitors.php can be manipulated to execute arbitrary Web script or HTML. The issue can be exploited remotely and has been discl...

5.4CVSS3.6AI score0.00237EPSS
Save
CVE
CVE
added 2025/07/19 11:32 a.m.34 views

CVE-2025-7817

Summary of CVE-2025-7817 (PHPGurukul Apartment Visitors Management System 1.0) A cross-site scripting vulnerability affects the file /bwdates-reports.php in the HTTP POST Request Handler, via manipulation of the visname parameter. Multiple connected sources confirm the flaw, which can be exploite...

5.4CVSS3.9AI score0.00305EPSS
Save
CVE
CVE
added 2025/07/19 10:32 a.m.33 views

CVE-2025-7816

CVE-2025-7816 affects PHPGurukul Apartment Visitors Management System 1.0. The reported issue is a cross-site scripting vulnerability in the HTTP POST Request Handler, specifically the /visitor-detail.php file where the visname parameter can be manipulated to inject arbitrary scripts. The vulnera...

5.4CVSS3.8AI score0.00302EPSS
Save
CVE
CVE
added 2025/07/19 10:44 p.m.33 views

CVE-2025-7857

CVE-2025-7857 affects PHPGurukul Apartment Visitors Management System 1.0 in the HTTP POST Request Handler, specifically the bwdates-passreports-details.php file. The root cause is a cross-site scripting (XSS) vulnerability triggered by unvalidated input in the visname argument. The issue can be ...

5.4CVSS3.8AI score0.00239EPSS
Save
CVE
CVE
added 2025/07/19 12:14 p.m.32 views

CVE-2025-7819

PHPGurukul Apartment Visitors Management System (version 1.0) has a cross-site scripting vulnerability in the HTTP POST Request Handler, specifically in the /create-pass.php file via the visname parameter. The issue arises from improper handling/escapes of user-supplied data, allowing remote atta...

5.4CVSS3.5AI score0.00237EPSS
Save
CVE
CVE
added 2025/07/19 12:02 p.m.31 views

CVE-2025-7818

Summary (CVE-2025-7818): PHPGurukul Apartment Visitors Management System v1.0 has a cross-site scripting (XSS) flaw in the HTTP POST Request Handler, specifically in category.php where the categoryname parameter can be manipulated to inject arbitrary scripts. The issue can be exploited remotely a...

5.4CVSS6.5AI score0.00305EPSS
Save
CVE
CVE
added 2025/07/19 11:44 p.m.31 views

CVE-2025-7858

CVE-2025-7858 affects PHPGurukul Apartment Visitors Management System 1.0. The vulnerability exists in the HTTP POST Request Handler component, in the file /admin-profile.php , where an attacker can manipulate the adminname parameter to trigger cross-site scripting. Exploitation is possible remot...

5.4CVSS3.9AI score0.00239EPSS
Save