CVE-2025-25357

CVE-2025-25357 concerns a SQL Injection in PHPGurukul Land Record System v1.0, exploitable via the email field in POST to /admin/contactus.php. The vulnerability arises from unsafely handling user-supplied input, enabling remote attackers to cause arbitrary code execution. CVSSv3.1 metrics indica...

CVE-2025-25462

The PHPGurukul Land Record System Project in PHP v1.0 is vulnerable to a SQL Injection flaw in the /admin/add-propertytype.php endpoint. A remote attacker can exploit this by sending a malicious propertytype POST request parameter to execute arbitrary code . Proof-of-concept exploitation has been...

CVE-2024-13075

CVE-2024-13075 affects PHPGurukul Land Record System 1.0, specifically the /admin/add-propertytype.php parameter Land Property Type. The issue is an input manipulation that leads to cross-site scripting (XSS); the attack can be initiated remotely and the exploit has been disclosed publicly. Conne...

CVE-2025-25354

CVE-2025-25354 affects PHPGurukul Land Record System v1.0. A SQL injection in /admin/admin-profile.php via the contactnumber POST parameter allows remote attackers to execute arbitrary code. Exploitation details are not provided in the documents. Impact is high (C/H/I/A), with network attack vect...

CVE-2025-25355

CVE-2025-25355 describes a SQL Injection vulnerability in the PHPGurukul Land Record System v1.0, affecting the file path /admin/bwdates-reports-details.php via the POST parameter fromdate . The underlying issue is improper input handling that allows remote attackers to inject SQL and potentially...

CVE-2024-13084

CVE-2024-13084 affects PHPGurukul Land Record System 1.0. The vulnerability is an SQL injection in the unknown-functionality exposed by the file /admin/search-property.php , triggered by manipulating the searchdata argument. Exploitation can be performed remotely and has been disclosed publicly. ...

CVE-2025-25388

A SQL Injection vulnerability exists in the PHPGurukul Land Record System v1.0 . The flaw is located in the /admin/edit-propertytype.php file, where the editid GET request parameter is improperly neutralized. This vulnerability allows remote attackers to execute arbitrary code . No specific remed...

CVE-2025-25389

A SQL Injection vulnerability exists in the Phpgurukul Land Record System v1.0 within the /admin/forgot-password.php file. The root cause is the improper neutralization of special elements used in an SQL command via the contactno POST request parameter. This allows remote attackers to execute arb...

CVE-2025-25387

A SQL Injection vulnerability exists in the /admin/manage-propertytype.php file of PHPGurukul Land Record System v1.0 . The root cause is the improper neutralization of special elements used in an SQL command within the propertytype POST request parameter. This flaw allows remote attackers to exe...

CVE-2024-13078

The CVE concerns PHPGurukul Land Record System 1.0 where the vulnerability is in the /index.php functionality accessed via the searchdata parameter, enabling SQL injection. The issue is exploitable remotely and has public disclosure, with multiple sources confirming the vendor-facing details and ...

CVE-2024-13077

CVE-2024-13077 affects PHPGurukul Land Record System 1.0. The vulnerability is in an unknown function of /admin/add-property.php where manipulating the Land Subtype parameter triggers cross-site scripting. Remote exploitation is possible, and disclosures/public availability of the exploit are not...

CVE-2024-13081

Summary: CVE-2024-13081 affects PHPGurukul Land Record System 1.0. The vulnerability is a cross-site scripting flaw in the /admin/contactus.php file, triggered by manipulating the Page Description parameter. This can be exploited remotely and the exploit has been disclosed publicly. Details from ...

CVE-2025-25356

CVE-2025-25356 affects PHPGurukul Land Record System v1.0. The vulnerability is a SQL injection in /admin/bwdates-reports-details.php, exploitable via the todate parameter in a POST request, potentially allowing remote code execution. Reported metrics indicate a HIGH severity (CVSS v3.1: 7.2) wit...

CVE-2024-13074

CVE-2024-13074 concerns PHPGurukul Land Record System 1.0. The vulnerability affects an unknown part of the file /index.php, where manipulation of the searchdata argument leads to cross-site scripting (XSS). The issue can be triggered remotely and exploits have been disclosed publicly. Multiple c...

CVE-2025-4163

CVE-2025-4163 concerns PHPGurukul Land Record System 1.0. The issue is a SQL injection in the file /admin/aboutus.php caused by manipulation of the pagetitle argument. It is described as remote-exploitable, with the exploit publicly disclosed. Connected sources confirm the vulnerability is tied t...

CVE-2025-25352

CVE-2025-25352 : A SQL injection vulnerability exists in PHPGurukul Land Record System v1.0, specifically in /admin/aboutus.php where the POST parameter pagetitle can be exploited to execute arbitrary SQL code. This affects the affected software/component as described in the linked sources; explo...

CVE-2024-57686

A Cross Site Scripting (XSS) vulnerability exists in the PHPGurukul Land Record System v1.0 . The flaw is located in the /landrecordsys/admin/contactus.php file and is triggered via the "pagetitle" parameter. This vulnerability allows remote attackers to execute arbitrary code . Proof-of-concept ...

CVE-2024-13076

CVE-2024-13076 affects PHPGurukul Land Record System 1.0. The issue is a cross-site scripting vulnerability in the /admin/edit-propertytype.php handler, triggered by manipulating the Property Type parameter. The attack can be initiated remotely and the exploit has been disclosed publicly. Connect...

CVE-2024-13080

CVE-2024-13080 affects PHPGurukul Land Record System 1.0. The vulnerability is a cross-site scripting (XSS) flaw arising from manipulating the Page Description parameter in the file /admin/aboutus.php. It can be triggered remotely and the exploit has been disclosed publicly. Multiple connected so...

CVE-2024-57687

An OS Command Injection vulnerability exists in the PHPGurukul Land Record System v1.0 within the /landrecordsys/admin/dashboard.php file. The flaw allows remote attackers to execute arbitrary commands by supplying malicious input through the "Cookie" GET request parameter . This vulnerability ca...

CVE-2024-13085

PHPGurukul Land Record System 1.0 is affected by a SQL injection in /admin/login.php via the username parameter. The vulnerability is described as critical, remotely exploitable, with exploits disclosed publicly. Affected functionality is unknown within the login flow, and multiple sources corrob...

CVE-2024-13082

CVE-2024-13082 affects PHPGurukul Land Record System 1.0. The issue stems from improper handling of the Search By argument in /admin/search-property.php, enabling cross-site scripting. Descriptions indicate remote initiation and public disclosure of the exploit, implying an exploitable vulnerabil...

CVE-2024-13083

CVE-2024-13083 affects PHPGurukul Land Record System 1.0. The issue is a cross-site scripting (XSS) vulnerability in an unknown function of the file /admin/admin-profile.php, triggered by manipulating the Admin Name parameter. The vulnerability can be exploited remotely and the exploit has been d...

CVE-2024-13079

PHPGurukul Land Record System 1.0 is affected; the vulnerability is an SQL injection in /admin/property-details.php caused by unsafely handling the editid parameter. This can be exploited remotely and has been publicly disclosed. Impacts include potential confidentiality, integrity, and availabil...

CVE-2025-7757

CVE-2025-7757 affects PHPGurukul Land Record System 1.0. The vulnerability exists in an unknown functionality of /edit-property.php where the editid parameter can be manipulated to cause SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly. Multiple conne...