CVE-2025-5639

The CVE-2025-5639 entry concerns PHPGurukul Notice Board System v1.0 with a SQL injection in /forgot-password.php via the email parameter. Affected component is the forgot-password flow; the issue allows remote exploitation and could lead to unauthorized database access or data disclosure, as des...

CVE-2025-5566

CVE-2025-5566 pertains to PHPGurukul Notice Board System 1.0, where the argument searchdata in the file /search-notice.php can be manipulated to trigger an SQL injection. The vulnerability is exploitable remotely and has been publicly disclosed. The available sources describe an(SQL) injection vu...

CVE-2025-5638

CVE-2025-5638 affects PHPGurukul Notice Board System 1.0. The vulnerability resides in /admin-profile.php, where manipulating the mobilenumber parameter leads to SQL injection. Exploitation can be performed remotely, and multiple parameters may be affected. Multiple connected sources corroborate ...

CVE-2025-4906

CVE-2025-4906 affects PHPGurukul Notice Board System v1.0. Affects the login.php file where manipulation of the Username argument enables SQL injection, with remote access and public disclosure of exploits noted across multiple sources. Root cause is an unresolved SQL statement handling in the lo...