CVE-2025-2093

CVE-2025-2093 affects PHPGurukul Online Library Management System 3.0. The vulnerability concerns an issue in the /change-password.php flow where manipulating the email/phone parameter enables weak password recovery. Impact is described as remote exploitation with low public impact, and multiple ...

CVE-2025-7601

PHPGurukul Online Library Management System v3.0 has a cross-site scripting (XSS) flaw in /admin/student-history.php where the stdid parameter is not properly sanitized. Exploitation can be performed remotely and the vulnerability has been publicly disclosed. The issue stems from unsafely handlin...

CVE-2025-7600

Summary (concrete details): PHPGurukul Online Library Management System 3.0 contains a SQL injection in the admin-side file /admin/student-history.php via the vulnerable parameter stdid . The issue arises from unsanitized user input, enabling remote exploitation and data theft. Multiple sources c...

CVE-2025-50488

CVE-2025-50488 affects the PHPGurukul Online Library Management System v3.0 due to an improper session invalidation flaw in the /library/change-password.php component, enabling session hijacking. The incident is confirmed across multiple sources (NVD, Red Hat, CNVD, etc.) with the CVSSv3.1 base s...

CVE-2025-57119

CVE-2025-57119 affects Online Library Management System v3.0. The vulnerability is a privilege-escalation flaw in the adminlogin.php component via the Login() function. Impact is indicated as high (CVSS 9.8, CRITICAL). Remediation information present in connected documents suggests applying updat...

CVE-2025-57118

CVE-2025-57118 affects PHPGurukul Online-Library-Management-System v3.0, with a mismanagement of privileges in index.php that enables an elevation of privileges. The NVD/CNVD/RH entries describe a high-impact, total compromise potential (CVSSv3.1: 9.8, CRITICAL; attack vector: NETWORK; privileges...