CVE-2025-2093

CVE-2025-2093 affects PHPGurukul Online Library Management System 3.0. The vulnerability concerns an issue in the /change-password.php flow where manipulating the email/phone parameter enables weak password recovery. Impact is described as remote exploitation with low public impact, and multiple ...

CVE-2025-7601

PHPGurukul Online Library Management System v3.0 has a cross-site scripting (XSS) flaw in /admin/student-history.php where the stdid parameter is not properly sanitized. Exploitation can be performed remotely and the vulnerability has been publicly disclosed. The issue stems from unsafely handlin...

CVE-2025-50488

The PHPGurukul Online Library Management System v3.0 is affected by a vulnerability involving improper session invalidation in the /library/change-password.php component. This flaw, categorized under CWE-613 (Insufficient Session Expiration), allows an attacker to perform a session hijacking atta...

CVE-2025-7600

Summary (concrete details): PHPGurukul Online Library Management System 3.0 contains a SQL injection in the admin-side file /admin/student-history.php via the vulnerable parameter stdid . The issue arises from unsanitized user input, enabling remote exploitation and data theft. Multiple sources c...

CVE-2025-57119

An elevation of privilege vulnerability exists in Online Library Management System v.3.0 . The flaw is located within the adminlogin.php component specifically affecting the Login() function. An attacker can exploit this vulnerability to escalate privileges within the system. To mitigate this ris...

CVE-2025-57118

The PHPGurukul Online-Library-Management-System v3.0 is vulnerable to an elevation of privilege due to improper privilege management within the index.php file. An attacker can exploit this flaw to gain elevated privileges. No information regarding a patched version or specific fix is currently av...