CVE-2025-4214

CVE-2025-4214 affects PHPGuruku Online DJ Booking Management System v1.0. The vulnerability lies in /admin/booking-bwdates-reports-details.php where manipulation of the fromdate parameter yields SQL injection. Exploitation is possible remotely (no authentication) and has been publicly disclosed. ...

CVE-2025-4262

PHPGurukul Online DJ Booking Management System 1.0 is affected by a SQL injection in /admin/user-search.php caused by unsafely handling the searchdata parameter. The issue can be exploited remotely and has been publicly disclosed; multiple sources corroborate exploitation potential. Remediation g...

CVE-2024-51076

The CVE-2024-51076 issue affects PHPGurukul Online DJ Booking Management System v1.0. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /odms/admin/booking-search.php endpoint, exploitable via the searchdata parameter to cause arbitrary code execution in the context of a user ses...

CVE-2025-4263

The CVE-2025-4263 entry concerns PHPGurukul Online DJ Booking Management System 1.0. The vulnerability is an SQL injection in the /admin/booking-search.php endpoint caused by manipulating the searchdata parameter. It is remote in nature, with multiple sources noting public disclosure of the explo...

CVE-2024-51075

CVE-2024-51075 affects PHPGurukul Online DJ Booking Management System v1.0, with a Reflected XSS in /odms/admin/user-search.php via the searchdata parameter. The vulnerability allows remote attackers to execute arbitrary code in the context of the user session. Connected sources note a PoC exists...

CVE-2021-42223

CVE-2021-42223 affects Online DJ Booking Management System 1.0. The vulnerability is a Cross-Site Scripting (XSS) in view-booking-detail.php. Root cause: unsanitized input leading to script execution. CVSS scores reported: CVSS v2.0 base score 4.3 (MEDIUM) and CVSS v3.1 base score 6.1 (MEDIUM). E...

CVE-2025-50695

PHPGurukul Online DJ Booking Management System version 2.0 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The vulnerability specifically affects the /admin/view-booking-detail.php and /admin/invoice-generating.php endpoints. This fl...

CVE-2025-50693

PHPGurukul Online DJ Booking Management System version 2.0 is vulnerable to an Insecure Direct Object Reference (IDOR) within the odms/request-details.php file. This flaw allows unauthorized access to sensitive information. As a temporary workaround, it is recommended to restrict access to the od...

CVE-2025-50699

The PHPGurukul Online DJ Booking Management System version 2.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability within the odms/admin/view-user-queries.php file. The root cause is the lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a c...