CVE-2025-4249

CVE-2025-4249 affects PHPGurukul e-Diary Management System 1.0, targeting the /manage-categories.php functionality. The root cause is an SQL injection caused by manipulation of the ID argument, with remote attack potential. Multiple sources confirm the vulnerability and public disclosure of explo...

CVE-2022-29004

Diary Management System v1.0 is affected by a Cross-Site Scripting (XSS) vulnerability exploitable via the Name parameter in search-result.php. The Nuclei template (CVE-2022-29004) confirms the issue and describes impact as injection of malicious scripts leading to user-facing script execution, s...

CVE-2025-3242

CVE-2025-3242 affects PHPGurukul e-Diary Management System 1.0, with a vulnerability in the file /search-result.php where manipulating the searchdata parameter enables SQL injection. The issue is exploitable remotely and has been publicly disclosed. Multiple connected sources reiterate that the a...

CVE-2025-3216

CVE-2025-3216 affects PHPGurukul e-Diary Management System 1.0, specifically the /password-recovery.php file. The vulnerability arises from unsafely handling the username and contactno parameters, enabling SQL injection. The issue is exploitable remotely and exploitation details have been publicl...

CVE-2025-4508

Summary of findings for CVE-2025-4508 : The PHPGurukul e-Diary Management System (version 1.0) is affected by an SQL injection in the /my-profile.php file, triggered by manipulating the fname parameter. Multiple connected sources (CNVD/CNNVD, NVD/CVELIST, Red Hat advisories, and PT Security feed)...

CVE-2025-3213

CVE-2025-3213 affects PHPGurukul e-Diary Management System 1.0. The vulnerability is in view-note.php?noteid=11 where the remark parameter enables SQL injection due to improper input validation. Exploitation appears remote (network vector) with potential data exposure. Multiple connected sources ...

CVE-2025-3220

CVE-2025-3220 affects PHPGurukul e-Diary Management System v1.0. The vulnerability is caused by SQL injection in the dashboard.php file, triggered by manipulating the Category parameter. It is described as exploitable remotely, with the exploit publicly disclosed. Multiple sources corroborate an ...

CVE-2025-3217

Summary: CVE-2025-3217 affects PHPGurukul e-Diary Management System 1.0, specifically the /registration.php file where the emailid parameter is unsafely used, causing SQL injection. Multiple connected sources confirm remote exploitation potential and public disclosure of exploits. Impact is descr...

CVE-2025-3265

The CVE-2025-3265 entry affects PHPGurukul e-Diary Management System v1.0, specifically the code path handling the Category argument in /add-category.php. The vulnerability arises from improper handling of the Category parameter, enabling SQL injection via remote exploitation. Public disclosures ...

CVE-2025-4509

PHPGurukul e-Diary Management System 1.0 is affected by a SQL injection in /manage-notes.php via the ID parameter. The vulnerability allows remote attacker input manipulation, potentially leading to unauthorized data access or modification. Publicly disclosed exploits exist. Acknowledged mitigati...

CVE-2025-3006

CVE-2025-3006 affects PHPGurukul e-Diary Management System 1.0. The vulnerability is a SQL injection in the file /edit-category.php?id=8, caused by unvalidated input in the Category parameter. Exploitation can be performed remotely and, per connected sources, the exploit has been disclosed public...

CVE-2025-3188

CVE-2025-3188 affects PHPGurukul e-Diary Management System 1.0. The vulnerability lies in the /add-notes.php file where manipulating the Category parameter enables SQL injection. Exploitation can be initiated remotely, and public disclosures exist across multiple sources, indicating active risk. ...

CVE-2025-3187

CVE-2025-3187 affects PHPGurukul e-Diary Management System v1.0. The vulnerability is in the login.php file, where manipulation of the logindetail parameter leads to a SQL injection. Multiple connected documents describe remote-exploit potential and classify the issue as critical/high impact, wit...

CVE-2025-50486

PHPGurukul Car Rental Project v3.0 is vulnerable to a session hijacking attack due to improper session invalidation within the /carrental/update-password.php component. The flaw stems from the application failing to properly terminate sessions during the password update process. To remediate this...

CVE-2025-50492

The PHPGurukul e-Diary Management System v1 is vulnerable to a session hijacking attack due to improper session invalidation within the /edms/change-password.php component. This flaw allows an attacker to hijack active sessions. To remediate this vulnerability, users should apply the latest updat...