CVE-2022-29005

CVE-2022-29005 : The Online Birth Certificate System v1.2 contains multiple stored XSS vulnerabilities in the /obcs/user/profile.php component, exploitable via crafted payloads in the fname or lname parameters. Affected behavior includes arbitrary script/HTML execution in victims’ browsers, with ...

CVE-2025-4242

CVE-2025-4242 affects PHPGurukul Online Birth Certificate System 2.0. The vulnerability is a SQL injection in the /admin/between-dates-report.php file caused by improper manipulation of the fromdate parameter, with remote exploitability and public disclosure. Multiple sources confirm the issue an...

CVE-2025-4213

CVE-2025-4213 affectsPHPGurukul Online Birth Certificate System 1.0, specifically the file /admin/search.php. The root cause is improper handling/validation of the searchdata parameter, enabling an SQL injection vulnerability. Exploitation can be performed remotely; multiple sources indicate the ...

CVE-2025-5373

The CVE-2025-5373 entry concerns PHPGurukul Online Birth Certificate System 2.0. A SQL injection affects the /admin/users-applications.php file via manipulation of the userid parameter. The issue is exploitable remotely, with public exploit disclosure noted. Multiple connected sources corroborate...

CVE-2024-57175

The PHPGURUKUL Online Birth Certificate System v1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability (CWE-79). The flaw exists in the /user/certificate-form.php endpoint, specifically within the profile name field, due to a lack of effective filtering and escaping of user-suppli...

CVE-2025-4152

The CVE-2025-4152 entry concerns PHPGurukul Online Birth Certificate System 1.0. The vulnerability is a SQL injection in the /admin/bwdates-reports-details.php file triggered by manipulating the fromdate parameter, with remote access possible and other parameters potentially affected. Public expl...

CVE-2024-55059

A stored HTML Injection vulnerability exists in PHPGurukul Online Birth Certificate System v1.0 within the /user/certificate-form.php endpoint. The root cause is the application's lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a crafted payload ...

CVE-2024-55058

The PHPGurukul Online Birth Certificate System v1.0 is affected by an Insecure Direct Object Reference (IDOR) vulnerability. The flaw exists in the viewid parameter of the /user/view-application-detail.php file due to a lack of proper authorization checks. This allows authenticated users to acces...

CVE-2024-55056

A stored cross-site scripting (XSS) vulnerability exists in Phpgurukul Online Birth Certificate System 1.0 . The flaw is located in the /user/certificate-form.php file and is triggered via the full name field . The root cause is a lack of effective filtering and escaping of user-supplied data, al...

CVE-2025-5374

PHPGurukul Online Birth Certificate System 2.0 is affected by a SQL injection in the /admin/all-applications.php endpoint, caused by unsafely handling the del parameter. This vulnerability could allow remote attackers to execute arbitrary SQL commands, with the potential to access or modify sensi...

CVE-2024-55057

The Phpgurukul Online Birth Certificate System 1.0 is affected by a vulnerability involving insufficient password requirements . This flaw allows an attacker to gain unauthorized access to user accounts. While the specific technical mechanism of the password policy failure is not detailed beyond ...

CVE-2025-5375

The CVE-2025-5375 entry concerns PHPGurukul HPGurukul Online Birth Certificate System 2.0. Affected is an unknown function in the file /admin/registered-users.php where the del parameter can be manipulated to trigger SQL injection. The vulnerability can be exploited remotely and exploitation has ...