CVE-2025-4155

CVE-2025-4155 affects PHPGurukul Boat Booking System 1.0. The vulnerability is an SQL injection in the /admin/edit-boat.php file caused by improper handling of the bid parameter. Remote exploitation is possible, and public disclosures exist. Connected sources consistently identify the affected co...

CVE-2024-51208

The CVE concerns Anuj Kumar's Boat Booking System v1.0 where the vulnerable component is change-image.php’s Image Upload Mechanism parameter. The issue is a File Upload vulnerability that lets local attackers upload a malicious PHP script, enabling potential code execution on the system. Exploita...

CVE-2025-3147

The CVE-2025-3147 issue affects PHPGurukul Boat Booking System v1.0, with the vulnerability residing in the /add-subadmin.php code path where manipulation of the sadminusername parameter enables SQL injection. Multiple sources (NVD, Red Hat, CVE lists, CNNVD, Vulners enrichments, PT-Software advi...

CVE-2025-4157

CVE-2025-4157 affects PHPGurukul Boat Booking System 1.0, specifically the "/admin/booking-details.php" endpoint. The vulnerability arises from improper handling of the \

CVE-2024-10158

CVE-2024-10158 affects PHPGurukul Boat Booking System 1.0. The vulnerability is linked to the session_start function, enabling session fixation. Exploitation is described as possible remotely, and public disclosures of the exploit are noted in the connected documents. The issue is documented acro...

CVE-2025-4156

CVE-2025-4156 affects PHPGurukul Boat Booking System 1.0. The vulnerability is in the /admin/change-image.php file, where manipulation of the ID parameter enables a SQL injection. The attack can be launched remotely and the exploit has been publicly disclosed. No specific remediation is provided ...

CVE-2024-10159

Summary of CVE-2024-10159 : The PHPGurukul Boat Booking System 1.0 contains a SQL injection vulnerability in the My Profile Page component, specifically via /admin/profile.php. The vulnerability arises from manipulating parameters such as sadminusername, fullname, emailid, and mobilenumber, enabl...

CVE-2025-2471

CVE-2025-2471 affects PHPGurukul Boat Booking System 1.0. Affected is the file /boat-details.php where manipulating the bid parameter leads to SQL injection. The vulnerability can be exploited remotely and exploitation details have been disclosed publicly. Connected sources corroborate a high-sev...

CVE-2024-10154

The CVE-2024-10154 entry affects PHPGurukul Boat Booking System 1.0, specifically the status.php component of the Check Booking Status Page. The vulnerability is a SQL injection triggered by manipulating the emailid parameter, allowing remote exploitation and with publicly disclosed exploit detai...

CVE-2024-10157

The CVE-2024-10157 entry concerns PHPGurukul Boat Booking System v1.0 with an SQL injection in the Reset Your Password Page’s /admin/password-recovery.php, triggered by manipulating the username parameter. The vulnerability can be exploited remotely and has been publicly disclosed. Connected sour...

CVE-2024-10155

The CVE-2024-10155 entry affects PHPGurukul Boat Booking System 1.0, specifically the Book a Boat Page component, in file book-boat.php?bid=1. The vulnerability arises from manipulation of the phone_number parameter, enabling cross-site scripting (XSS) and allowing remote initiation of attacks. P...

CVE-2024-10191

CVE-2024-10191 affects PHPGurukul Boat Booking System 1.0. The vulnerability is a cross-site scripting flaw in the /admin/book-details.php page, triggered by manipulating the Official Remark parameter. Remote exploitation is possible, and multiple sources confirm the public disclosure of the expl...

CVE-2024-10156

CVE-2024-10156 affects PHPGurukul Boat Booking System 1.0, specifically the Sign In Page in /admin/index.php. The vulnerability arises from unsafely handling the username parameter, enabling SQL injection. The issue is exploitable remotely and has been disclosed publicly. Multiple connected sourc...

CVE-2024-10162

Summary: CVE-2024-10162 affects PHPGurukul Boat Booking System 1.0, specifically the /admin/edit-subadmin.php page. The vulnerability is a SQL injection that can be triggered via multiple parameters including sadminusername, fullname, emailid, and mobilenumber, with a remote attack vector and a d...

CVE-2024-10161

CVE-2024-10161 affects the PHPGurukul Boat Booking System 1.0, specifically the Update Boat Image Page’s change-image.php. The vulnerability arises from unsafely handling the image parameter, leading to an unrestricted file upload. It can be exploited remotely, and multiple sources note that expl...

CVE-2024-10153

The CVE-2024-10153 entry affects PHPGurukul Boat Booking System 1.0, specifically the Book a Boat Page’s book-boat.php?bid=1 functionality. The root cause is an SQL injection caused by manipulating the nopeople and bookingdatefrom parameters (and potentially others). This vulnerability can be tri...

CVE-2024-10160

The CVE-2024-10160 entry describes a SQL injection in PHPGurukul Boat Booking System 1.0, specifically in the BW Dates Report Page file /admin/bwdates-report-details.php. The vulnerability stems from unsafely handling the fdate and tdate parameters, enabling remote exploitation and leading to hig...

CVE-2025-8431

CVE-2025-8431 affects PHPGurukul Boat Booking System 1.0, specifically the vulnerable file /admin/add-boat.php where the boatname parameter is susceptible to SQL injection. The issue enables remote exploitation and has been publicly disclosed. Impact is described as a critical vulnerability in mu...