CVE-2025-4214

CVE-2025-4214 affects PHPGuruku Online DJ Booking Management System v1.0. The vulnerability lies in /admin/booking-bwdates-reports-details.php where manipulation of the fromdate parameter yields SQL injection. Exploitation is possible remotely (no authentication) and has been publicly disclosed. ...

CVE-2024-51076

The CVE-2024-51076 issue affects PHPGurukul Online DJ Booking Management System v1.0. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /odms/admin/booking-search.php endpoint, exploitable via the searchdata parameter to cause arbitrary code execution in the context of a user ses...

CVE-2024-51075

CVE-2024-51075 affects PHPGurukul Online DJ Booking Management System v1.0, with a Reflected XSS in /odms/admin/user-search.php via the searchdata parameter. The vulnerability allows remote attackers to execute arbitrary code in the context of the user session. Connected sources note a PoC exists...

CVE-2025-4262

PHPGurukul Online DJ Booking Management System 1.0 is affected by a SQL injection in /admin/user-search.php caused by unsafely handling the searchdata parameter. The issue can be exploited remotely and has been publicly disclosed; multiple sources corroborate exploitation potential. Remediation g...

CVE-2025-4263

The CVE-2025-4263 entry concerns PHPGurukul Online DJ Booking Management System 1.0. The vulnerability is an SQL injection in the /admin/booking-search.php endpoint caused by manipulating the searchdata parameter. It is remote in nature, with multiple sources noting public disclosure of the explo...

CVE-2021-42223

CVE-2021-42223 affects Online DJ Booking Management System 1.0. The vulnerability is a Cross-Site Scripting (XSS) in view-booking-detail.php. Root cause: unsanitized input leading to script execution. CVSS scores reported: CVSS v2.0 base score 4.3 (MEDIUM) and CVSS v3.1 base score 6.1 (MEDIUM). E...

CVE-2025-50695

CVE-2025-50695 affects PHPGurukul Online DJ Booking Management System 2.0. The vulnerability is Cross Site Scripting (XSS) in the admin endpoints /admin/view-booking-detail.php and /admin/invoice-generating.php. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N with a base scor...

CVE-2025-50693

The CVE-2025-50693 entry applies to PHPGurukul Online DJ Booking Management System 2.0, with an Insecure Direct Object Reference (IDOR) in odms/request-details.php. The root cause is IDOR allowing access to potentially sensitive information (impact: confidentiality – None, integrity – Low, availa...

CVE-2025-50699

PHPGurukul Online DJ Booking Management System 2.0 contains a Cross-Site Scripting (XSS) flaw in odms/admin/view-user-queries.php. CVSS v3.1 base score 6.1 (MEDIUM) with NETWORK attack vector, no privileges required, user interaction required, and changed scope; impact: Confidentiality Low, Integ...