CVE-2025-25357

CVE-2025-25357 concerns a SQL Injection in PHPGurukul Land Record System v1.0, exploitable via the email field in POST to /admin/contactus.php. The vulnerability arises from unsafely handling user-supplied input, enabling remote attackers to cause arbitrary code execution. CVSSv3.1 metrics indica...

CVE-2025-25462

A SQL Injection vulnerability exists in the PHPGurukul Land Record System Project (version v1.0 ). The flaw is located in the /admin/add-propertytype.php file and is caused by improper neutralization of special elements in an SQL command. Remote attackers can exploit this by sending a malicious p...

CVE-2024-13075

CVE-2024-13075 affects PHPGurukul Land Record System 1.0, specifically the /admin/add-propertytype.php parameter Land Property Type. The issue is an input manipulation that leads to cross-site scripting (XSS); the attack can be initiated remotely and the exploit has been disclosed publicly. Conne...

CVE-2025-25355

CVE-2025-25355 describes a SQL Injection vulnerability in the PHPGurukul Land Record System v1.0, affecting the file path /admin/bwdates-reports-details.php via the POST parameter fromdate . The underlying issue is improper input handling that allows remote attackers to inject SQL and potentially...

CVE-2025-25354

CVE-2025-25354 affects PHPGurukul Land Record System v1.0. A SQL injection in /admin/admin-profile.php via the contactnumber POST parameter allows remote attackers to execute arbitrary code. Exploitation details are not provided in the documents. Impact is high (C/H/I/A), with network attack vect...

CVE-2025-25388

The PHPGurukul Land Record System v1.0 is susceptible to a SQL Injection vulnerability located in the /admin/edit-propertytype.php file. This security flaw exists because the editid GET request parameter is improperly neutralized, allowing remote attackers to execute arbitrary code. The vulnerabi...

CVE-2025-25389

A SQL Injection vulnerability exists in the Phpgurukul Land Record System v1.0 within the /admin/forgot-password.php endpoint. The flaw stems from improper neutralization of special elements in the contactno POST request parameter, which allows remote attackers to execute arbitrary code . This vu...

CVE-2024-13084

CVE-2024-13084 affects PHPGurukul Land Record System 1.0. The vulnerability is an SQL injection in the unknown-functionality exposed by the file /admin/search-property.php , triggered by manipulating the searchdata argument. Exploitation can be performed remotely and has been disclosed publicly. ...

CVE-2025-25387

The PHPGurukul Land Record System v1.0 contains a SQL Injection vulnerability (CWE-89) within the /admin/manage-propertytype.php file. The root cause is the improper neutralization of special elements in the propertytype POST request parameter , which allows remote attackers to execute arbitrary ...

CVE-2024-13077

CVE-2024-13077 affects PHPGurukul Land Record System 1.0. The vulnerability is in an unknown function of /admin/add-property.php where manipulating the Land Subtype parameter triggers cross-site scripting. Remote exploitation is possible, and disclosures/public availability of the exploit are not...

CVE-2025-25356

CVE-2025-25356 affects PHPGurukul Land Record System v1.0. The vulnerability is a SQL injection in /admin/bwdates-reports-details.php, exploitable via the todate parameter in a POST request, potentially allowing remote code execution. Reported metrics indicate a HIGH severity (CVSS v3.1: 7.2) wit...

CVE-2024-13074

CVE-2024-13074 concerns PHPGurukul Land Record System 1.0. The vulnerability affects an unknown part of the file /index.php, where manipulation of the searchdata argument leads to cross-site scripting (XSS). The issue can be triggered remotely and exploits have been disclosed publicly. Multiple c...

CVE-2024-13078

The CVE concerns PHPGurukul Land Record System 1.0 where the vulnerability is in the /index.php functionality accessed via the searchdata parameter, enabling SQL injection. The issue is exploitable remotely and has public disclosure, with multiple sources confirming the vendor-facing details and ...

CVE-2024-13081

Summary: CVE-2024-13081 affects PHPGurukul Land Record System 1.0. The vulnerability is a cross-site scripting flaw in the /admin/contactus.php file, triggered by manipulating the Page Description parameter. This can be exploited remotely and the exploit has been disclosed publicly. Details from ...

CVE-2025-4163

CVE-2025-4163 concerns PHPGurukul Land Record System 1.0. The issue is a SQL injection in the file /admin/aboutus.php caused by manipulation of the pagetitle argument. It is described as remote-exploitable, with the exploit publicly disclosed. Connected sources confirm the vulnerability is tied t...

CVE-2025-25352

CVE-2025-25352 : A SQL injection vulnerability exists in PHPGurukul Land Record System v1.0, specifically in /admin/aboutus.php where the POST parameter pagetitle can be exploited to execute arbitrary SQL code. This affects the affected software/component as described in the linked sources; explo...

CVE-2024-13080

CVE-2024-13080 affects PHPGurukul Land Record System 1.0. The vulnerability is a cross-site scripting (XSS) flaw arising from manipulating the Page Description parameter in the file /admin/aboutus.php. It can be triggered remotely and the exploit has been disclosed publicly. Multiple connected so...

CVE-2024-57687

An OS Command Injection vulnerability exists in the PHPGurukul Land Record System v1.0 within the /landrecordsys/admin/dashboard.php file. Remote attackers can exploit this flaw by manipulating the **

CVE-2024-13076

CVE-2024-13076 affects PHPGurukul Land Record System 1.0. The issue is a cross-site scripting vulnerability in the /admin/edit-propertytype.php handler, triggered by manipulating the Property Type parameter. The attack can be initiated remotely and the exploit has been disclosed publicly. Connect...

CVE-2024-57686

The PHPGurukul Land Record System v1.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability in the /landrecordsys/admin/contactus.php endpoint. This flaw allows remote attackers to execute arbitrary code by exploiting the "pagetitle" parameter due to improper neutralization of input during...

CVE-2024-13082

CVE-2024-13082 affects PHPGurukul Land Record System 1.0. The issue stems from improper handling of the Search By argument in /admin/search-property.php, enabling cross-site scripting. Descriptions indicate remote initiation and public disclosure of the exploit, implying an exploitable vulnerabil...

CVE-2024-13083

CVE-2024-13083 affects PHPGurukul Land Record System 1.0. The issue is a cross-site scripting (XSS) vulnerability in an unknown function of the file /admin/admin-profile.php, triggered by manipulating the Admin Name parameter. The vulnerability can be exploited remotely and the exploit has been d...

CVE-2024-13085

PHPGurukul Land Record System 1.0 is affected by a SQL injection in /admin/login.php via the username parameter. The vulnerability is described as critical, remotely exploitable, with exploits disclosed publicly. Affected functionality is unknown within the login flow, and multiple sources corrob...

CVE-2024-13079

PHPGurukul Land Record System 1.0 is affected; the vulnerability is an SQL injection in /admin/property-details.php caused by unsafely handling the editid parameter. This can be exploited remotely and has been publicly disclosed. Impacts include potential confidentiality, integrity, and availabil...

CVE-2025-7757

CVE-2025-7757 affects PHPGurukul Land Record System 1.0. The vulnerability exists in an unknown functionality of /edit-property.php where the editid parameter can be manipulated to cause SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly. Multiple conne...