CVE-2025-2382

The CVE-2025-2382 entry concerns PHPGurukul Online Banquet Booking System 1.0. The vulnerability is in an unknown function of /admin/booking-search.php where manipulating the searchdata argument triggers an SQL injection. It is exploitable remotely and has been disclosed publicly. The impact indi...

CVE-2025-45947

The CVE-2025-45947 issue affects phpgurukul Online Banquet Booking System v1.2, where the /obbs/change-password.php file in the My Account - Change Password component can lead to arbitrary code execution due to improper handling. Documented impact is high, with potential full system compromise. M...

CVE-2022-28992

CVE-2022-28992 affects Online Banquet Booking System v1.0 and is a CSRF vulnerability that enables an attacker to change administrator credentials via a crafted POST request. Multiple sources confirm the impact and symmetry across advisories (e.g., Red Hat, CNVD, CNNVD, CVE listings). The core is...

CVE-2025-2608

CVE-2025-2608 affects PHPGurukul Banquet Booking System 1.2. The vulnerability is an SQL injection in the file /admin/view-user-queries.php caused by manipulation of the viewid parameter. It can be exploited remotely, and the exploit has been disclosed publicly. Sources consistently describe this...

CVE-2023-5303

CVE-2023-5303 affects Online Banquet Booking System 1.0, specifically the Account Detail Handler’s /view-booking-detail.php. The vulnerability stems from manipulation of the username parameter, enabling cross-site scripting (XSS). The issue is exploitable remotely and can impact confidentiality a...

CVE-2025-7924

CVE-2025-7924 affects PHPGurukul Online Banquet Booking System 1.0. The vulnerability exists in the file /admin/admin-profile.php where manipulating the adminname argument triggers cross-site scripting (XSS). It is exploitable remotely and public exploits have been disclosed. Connected documents ...

CVE-2025-7925

CVE-2025-7925 affects PHPGurukul Online Banquet Booking System 1.0, with a cross-site scripting vulnerability in the /admin/login.php file. The issue stems from manipulation of the user_login/userpassword parameters, enabling remote XSS when exploited. The vulnerability has been publicly disclose...

CVE-2025-7926

The CVE-2025-7926 entry concerns PHPGurukul Online Banquet Booking System 1.0. The vulnerability lies in the /admin/booking-search.php file, where manipulating the searchdata parameter enables cross-site scripting. It is possible to initiate the attack remotely, and the exploit has been disclosed...

CVE-2025-7927

PHPGurukul Online Banquet Booking System 1.0 is affected by a SQL injection in /admin/view-user-queries.php via the viewid parameter. The vulnerability can be exploited remotely, with exploit activity documented publicly. Affected component is server-side PHP code handling the viewid input; root ...