CVE-2025-25357

CVE-2025-25357 concerns a SQL Injection in PHPGurukul Land Record System v1.0, exploitable via the email field in POST to /admin/contactus.php. The vulnerability arises from unsafely handling user-supplied input, enabling remote attackers to cause arbitrary code execution. CVSSv3.1 metrics indica...

CVE-2025-25462

CVE-2025-25462 relates to a SQL injection in /admin/add-propertytype.php of PHPGurukul Land Record System Project v1.0. The vulnerability allows remote attackers to execute arbitrary code via the propertytype POST parameter. The connected documents confirm the affected product/version and the roo...

CVE-2024-13075

CVE-2024-13075 affects PHPGurukul Land Record System 1.0, specifically the /admin/add-propertytype.php parameter Land Property Type. The issue is an input manipulation that leads to cross-site scripting (XSS); the attack can be initiated remotely and the exploit has been disclosed publicly. Conne...

CVE-2025-25355

CVE-2025-25355 describes a SQL Injection vulnerability in the PHPGurukul Land Record System v1.0, affecting the file path /admin/bwdates-reports-details.php via the POST parameter fromdate . The underlying issue is improper input handling that allows remote attackers to inject SQL and potentially...

CVE-2025-25354

CVE-2025-25354 affects PHPGurukul Land Record System v1.0. A SQL injection in /admin/admin-profile.php via the contactnumber POST parameter allows remote attackers to execute arbitrary code. Exploitation details are not provided in the documents. Impact is high (C/H/I/A), with network attack vect...

CVE-2025-25389

CVE-2025-25389 is a SQL Injection vulnerability in Phpgurukul Land Record System v1.0, exploitable via the /admin/forgot-password.php endpoint and the contactno POST parameter. The issue allows remote attackers to execute arbitrary code and has a CVSSv3.1 base score of 9.8 (CRITICAL) with network...

CVE-2025-25388

CVE-2025-25388 is a SQL Injection vulnerability affecting PHPGurukul Land Record System v1.0, exploitable through the editid parameter in /admin/edit-propertytype.php. The description in multiple sources consistently states that an attacker can cause arbitrary code execution remotely due to this ...

CVE-2024-13084

CVE-2024-13084 affects PHPGurukul Land Record System 1.0. The vulnerability is an SQL injection in the unknown-functionality exposed by the file /admin/search-property.php , triggered by manipulating the searchdata argument. Exploitation can be performed remotely and has been disclosed publicly. ...

CVE-2024-13081

Summary: CVE-2024-13081 affects PHPGurukul Land Record System 1.0. The vulnerability is a cross-site scripting flaw in the /admin/contactus.php file, triggered by manipulating the Page Description parameter. This can be exploited remotely and the exploit has been disclosed publicly. Details from ...

CVE-2025-25356

CVE-2025-25356 affects PHPGurukul Land Record System v1.0. The vulnerability is a SQL injection in /admin/bwdates-reports-details.php, exploitable via the todate parameter in a POST request, potentially allowing remote code execution. Reported metrics indicate a HIGH severity (CVSS v3.1: 7.2) wit...

CVE-2024-13077

CVE-2024-13077 affects PHPGurukul Land Record System 1.0. The vulnerability is in an unknown function of /admin/add-property.php where manipulating the Land Subtype parameter triggers cross-site scripting. Remote exploitation is possible, and disclosures/public availability of the exploit are not...

CVE-2025-25387

CVE-2025-25387 affects PHPGurukul Land Record System v1.0. The vulnerability is a SQL Injection in /admin/manage-propertytype.php, exploitable via the propertytype POST parameter, enabling remote attackers to potentially execute arbitrary code. The primary affected component is the server-side PH...

CVE-2024-13074

CVE-2024-13074 concerns PHPGurukul Land Record System 1.0. The vulnerability affects an unknown part of the file /index.php, where manipulation of the searchdata argument leads to cross-site scripting (XSS). The issue can be triggered remotely and exploits have been disclosed publicly. Multiple c...

CVE-2024-13078

The CVE concerns PHPGurukul Land Record System 1.0 where the vulnerability is in the /index.php functionality accessed via the searchdata parameter, enabling SQL injection. The issue is exploitable remotely and has public disclosure, with multiple sources confirming the vendor-facing details and ...

CVE-2025-25352

CVE-2025-25352 : A SQL injection vulnerability exists in PHPGurukul Land Record System v1.0, specifically in /admin/aboutus.php where the POST parameter pagetitle can be exploited to execute arbitrary SQL code. This affects the affected software/component as described in the linked sources; explo...

CVE-2025-4163

CVE-2025-4163 concerns PHPGurukul Land Record System 1.0. The issue is a SQL injection in the file /admin/aboutus.php caused by manipulation of the pagetitle argument. It is described as remote-exploitable, with the exploit publicly disclosed. Connected sources confirm the vulnerability is tied t...

CVE-2024-57686

The vulnerability CVE-2024-57686 affects PHPGurukul Land Record System v1.0, specifically the /landrecordsys/admin/contactus.php component. The issue is a Cross Site Scripting (XSS) flaw that allows remote attackers to inject and execute arbitrary code through the pagetitle parameter. The reporte...

CVE-2024-13080

CVE-2024-13080 affects PHPGurukul Land Record System 1.0. The vulnerability is a cross-site scripting (XSS) flaw arising from manipulating the Page Description parameter in the file /admin/aboutus.php. It can be triggered remotely and the exploit has been disclosed publicly. Multiple connected so...

CVE-2024-13076

CVE-2024-13076 affects PHPGurukul Land Record System 1.0. The issue is a cross-site scripting vulnerability in the /admin/edit-propertytype.php handler, triggered by manipulating the Property Type parameter. The attack can be initiated remotely and the exploit has been disclosed publicly. Connect...

CVE-2024-13082

CVE-2024-13082 affects PHPGurukul Land Record System 1.0. The issue stems from improper handling of the Search By argument in /admin/search-property.php, enabling cross-site scripting. Descriptions indicate remote initiation and public disclosure of the exploit, implying an exploitable vulnerabil...

CVE-2024-57687

CVE-2024-57687: OS Command Injection in PHPGurukul Land Record System v1.0. Vulnerable in /landrecordsys/admin/dashboard.php via the Cookie parameter, enabling remote code execution. CVSSv3.1 base score 9.8 (CRITICAL), network attack vector, no user interaction required. Exploitation status is no...

CVE-2024-13085

PHPGurukul Land Record System 1.0 is affected by a SQL injection in /admin/login.php via the username parameter. The vulnerability is described as critical, remotely exploitable, with exploits disclosed publicly. Affected functionality is unknown within the login flow, and multiple sources corrob...

CVE-2024-13083

CVE-2024-13083 affects PHPGurukul Land Record System 1.0. The issue is a cross-site scripting (XSS) vulnerability in an unknown function of the file /admin/admin-profile.php, triggered by manipulating the Admin Name parameter. The vulnerability can be exploited remotely and the exploit has been d...

CVE-2024-13079

PHPGurukul Land Record System 1.0 is affected; the vulnerability is an SQL injection in /admin/property-details.php caused by unsafely handling the editid parameter. This can be exploited remotely and has been publicly disclosed. Impacts include potential confidentiality, integrity, and availabil...

CVE-2025-7757

CVE-2025-7757 affects PHPGurukul Land Record System 1.0. The vulnerability exists in an unknown functionality of /edit-property.php where the editid parameter can be manipulated to cause SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly. Multiple conne...