21 matches found
CVE-2025-4553
CVE-2025-4553 concerns a SQL injection in PHPGurukul Apartment Visitors Management System 1.0, triggered by improper handling of the fromdate/todate parameters in /admin/bwdates-reports-details.php. The issue allows remote exploitation and has been publicly disclosed. Multiple connected sources c...
CVE-2025-4550
The CVE-2025-4550 entry concerns PHPGurukul Apartment Visitors Management System 1.0. A vulnerability exists in the processing of the file /admin/pass-details.php where manipulating the pid parameter leads to SQL injection. Multiple sources describe this as a remote exploit that can disclose or t...
CVE-2025-4554
PHPGurukul Apartment Visitors Management System 1.0 is affected by a SQL injection in /admin/bwdates-passreports-details.php, triggered by manipulating the fromdate/todate parameters. Several sources describe remote exploitation with a disclosed exploit public. The vulnerability is categorized as...
CVE-2025-4505
The CVE-2025-4505 entry concerns PHPGurukul Apartment Visitors Management System v1.0. The vulnerability is in the /category.php functionality, where manipulating the categoryname argument triggers an SQL injection. Exploitation is possible remotely, and multiple sources note that the exploit has...
CVE-2025-2053
The CVE-2025-2053 entry concerns PHPGurukul Apartment Visitors Management System 1.0. The vulnerability affects an unknown function in /visitor-detail.php where manipulating the editid parameter enables SQL injection. Reports consistently describe remote exploitation and public disclosure of the ...
CVE-2025-2052
The CVE-2025-2052 entry concerns PHPGurukul Apartment Visitors Management System 1.0. The vulnerability is a SQL injection via the contactno parameter in forgot-password.php, enabling remote exploitation. Multiple sources (NVD, Red Hat, CNVD, CNNVD, CVE lists) describe the issue with public explo...
CVE-2025-2380
The CVE-2025-2380 entry corresponds to a SQL injection in PHPGurukul Apartment Visitors Management System 1.0, triggered by manipulating the mobilenumber parameter in /admin-profile.php. Various sources (NVD entry and national vulnerability databases) confirm unauthenticated remote exploitation w...
CVE-2025-2472
CVE-2025-2472 concerns PHPGurukul Apartment Visitors Management System 1.0. Multiple connected sources describe a SQL injection in the Sign In function, via manipulating the username parameter of /index.php, which can be exploited remotely without authentication. The vulnerability is described as...
CVE-2025-3120
The CVE describes an SQL injection in SourceCodester Apartment Visitors Management System 1.0 via the apartmentno parameter in /add-apartment.php. Exploitation can be remote and the vulnerability may affect multiple parameters. Exploitation status is not consistently documented across connected s...
CVE-2025-2051
The CVE-2025-2051 entry relates to PHPGurukul Apartment Visitors Management System 1.0 and a SQL injection in the searchdata parameter of /search-visitor.php. The flaw allows remote exploitation and is caused by improper validation/external SQL statement handling. Public disclosure is noted. Conn...
CVE-2025-2379
CVE-2025-2379 concerns PHPGurukul Apartment Visitors Management System 1.0. The vulnerability exists in the unknown code path of the file /create-pass.php , where manipulating the visname parameter leads to a SQL injection . The issue is exploitable remotely and the exploit has been disclosed pub...
CVE-2025-4699
CVE-2025-4699 affects PHPGurukul Apartment Visitors Management System 1.0, with SQL injection in /admin/visitors-form.php via the Category parameter. Remote exploitation is possible and the vulnerability has been disclosed publicly. Multiple connected sources (NVD/Red Hat/CNVD/CVE listings) descr...
CVE-2025-7946
CVE-2025-7946 affects PHPGurukul Apartment Visitors Management System 1.0. The vulnerability is a cross-site scripting flaw in the HTTP POST Request Handler, triggered by manipulating the searchdata argument processed in /search-visitor.php. Remote exploitation is possible, and public exploit inf...
CVE-2025-7856
CVE-2025-7856 affects PHPGurukul Apartment Visitors Management System 1.0. The vulnerability is in the HTTP POST Request Handler, specifically the pass-details.php file, where manipulating the parameter visname triggers a cross-site scripting (XSS) condition. The attack can be launched remotely, ...
CVE-2025-7815
PHPGurukul Apartment Visitors Management System 1.0 is affected by CVE-2025-7815 due to an XSS flaw in the HTTP POST Request Handler. The visname parameter in /manage-newvisitors.php can be manipulated to execute arbitrary Web script or HTML. The issue can be exploited remotely and has been discl...
CVE-2025-7817
Summary of CVE-2025-7817 (PHPGurukul Apartment Visitors Management System 1.0) A cross-site scripting vulnerability affects the file /bwdates-reports.php in the HTTP POST Request Handler, via manipulation of the visname parameter. Multiple connected sources confirm the flaw, which can be exploite...
CVE-2025-7816
CVE-2025-7816 affects PHPGurukul Apartment Visitors Management System 1.0. The reported issue is a cross-site scripting vulnerability in the HTTP POST Request Handler, specifically the /visitor-detail.php file where the visname parameter can be manipulated to inject arbitrary scripts. The vulnera...
CVE-2025-7857
CVE-2025-7857 affects PHPGurukul Apartment Visitors Management System 1.0 in the HTTP POST Request Handler, specifically the bwdates-passreports-details.php file. The root cause is a cross-site scripting (XSS) vulnerability triggered by unvalidated input in the visname argument. The issue can be ...
CVE-2025-7819
PHPGurukul Apartment Visitors Management System (version 1.0) has a cross-site scripting vulnerability in the HTTP POST Request Handler, specifically in the /create-pass.php file via the visname parameter. The issue arises from improper handling/escapes of user-supplied data, allowing remote atta...
CVE-2025-7818
Summary (CVE-2025-7818): PHPGurukul Apartment Visitors Management System v1.0 has a cross-site scripting (XSS) flaw in the HTTP POST Request Handler, specifically in category.php where the categoryname parameter can be manipulated to inject arbitrary scripts. The issue can be exploited remotely a...
CVE-2025-7858
CVE-2025-7858 affects PHPGurukul Apartment Visitors Management System 1.0. The vulnerability exists in the HTTP POST Request Handler component, in the file /admin-profile.php , where an attacker can manipulate the adminname parameter to trigger cross-site scripting. Exploitation is possible remot...