CVE-2022-29005

CVE-2022-29005 : The Online Birth Certificate System v1.2 contains multiple stored XSS vulnerabilities in the /obcs/user/profile.php component, exploitable via crafted payloads in the fname or lname parameters. Affected behavior includes arbitrary script/HTML execution in victims’ browsers, with ...

CVE-2025-4242

CVE-2025-4242 affects PHPGurukul Online Birth Certificate System 2.0. The vulnerability is a SQL injection in the /admin/between-dates-report.php file caused by improper manipulation of the fromdate parameter, with remote exploitability and public disclosure. Multiple sources confirm the issue an...

CVE-2025-4213

CVE-2025-4213 affectsPHPGurukul Online Birth Certificate System 1.0, specifically the file /admin/search.php. The root cause is improper handling/validation of the searchdata parameter, enabling an SQL injection vulnerability. Exploitation can be performed remotely; multiple sources indicate the ...

CVE-2025-5373

The CVE-2025-5373 entry concerns PHPGurukul Online Birth Certificate System 2.0. A SQL injection affects the /admin/users-applications.php file via manipulation of the userid parameter. The issue is exploitable remotely, with public exploit disclosure noted. Multiple connected sources corroborate...

CVE-2024-57175

PHPGURUKUL Online Birth Certificate System v1.0 (PHPGURUKUL) contains a Stored XSS in /user/certificate-form.php via the profile name field. Root cause is insufficient input handling/escaping, enabling an attacker to inject script that runs in a victim’s browser. The issue is documented across mu...

CVE-2025-4152

The CVE-2025-4152 entry concerns PHPGurukul Online Birth Certificate System 1.0. The vulnerability is a SQL injection in the /admin/bwdates-reports-details.php file triggered by manipulating the fromdate parameter, with remote access possible and other parameters potentially affected. Public expl...

CVE-2024-55058

CVE-2024-55058 applies to PHPGurukul Online Birth Certificate System v1.0, where an insecure direct object reference exists in the viewid parameter of /user/view-application-detail.php. The vulnerability allows authenticated users to manipulate the viewid in the URL to access sensitive birth cert...

CVE-2024-55056

Phpgurukul Online Birth Certificate System 1.0 contains a stored XSS in /user/certificate-form.php via the full name field. The CVE-2024-55056 entry has CVSS v3.1 base score 5.4 (Medium) with AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N. No explicit exploit details or mitigation/vulnerable version informa...

CVE-2024-55057

Technical details about CVE-2024-55057 are not publicly provided in the connected documents. The materials summarize inadequate password requirements but do not specify affected versions, components, or remediation steps. Monitor for updates.

CVE-2024-55059

CVE-2024-55059 concerns HTML injection in the PHPGurukul Online Birth Certificate System v1.0, triggered by input submitted to /user/certificate-form.php. Connected sources consistently describe the vulnerability as arising from insufficient filtering/escaping of user data, allowing injection of ...

CVE-2025-5374

PHPGurukul Online Birth Certificate System 2.0 is affected by a SQL injection in the /admin/all-applications.php endpoint, caused by unsafely handling the del parameter. This vulnerability could allow remote attackers to execute arbitrary SQL commands, with the potential to access or modify sensi...

CVE-2025-5375

The CVE-2025-5375 entry concerns PHPGurukul HPGurukul Online Birth Certificate System 2.0. Affected is an unknown function in the file /admin/registered-users.php where the del parameter can be manipulated to trigger SQL injection. The vulnerability can be exploited remotely and exploitation has ...