CVE-2023-7050

CVE-2023-7050 concerns PHPGurukul Online Notes Sharing System v1.0 where the file user/profile.php is vulnerable to cross-site scripting via manipulation of the name/email parameters. The issue is exploitable remotely and public exploit information exists. Connected sources confirm the affected c...

CVE-2023-7051

CVE-2023-7051 affects PHPGurukul Online Notes Sharing System 1.0. The vulnerability is a cross-site request forgery in the Notes Handler’s file /user/manage-notes.php triggered by manipulating the delid argument. Attacks may be launched remotely, and the exploit has been disclosed publicly (refer...

CVE-2023-7052

PHPGurukul Online Notes Sharing System 1.0 is affected by a cross-site request forgery vulnerability in an unknown portion of /user/profile.php caused by manipulation of the name argument. The issue can be triggered remotely and exploitation is publicly disclosed. Multiple connected sources consi...

CVE-2023-7053

PHPGurukul Online Notes Sharing System 1.0 is affected; /user/signup.php allows weak password validation due to a manipulation. Remote attack possible with high impact (C/I/A). Exploitation details are disclosed publicly. If available, apply the patch for stronger password validation and consider...

CVE-2023-7054

CVE-2023-7054 pertains to PHPGurukul Online Notes Sharing System 1.0, where unrestricted file upload is possible via processing of the file /user/add-notes.php. The impact, as described across sources, is an unrestricted upload that could enable remote abuse. The description is consistent across ...

CVE-2023-7055

The CVE concerns PHPGurukul Online Notes Sharing System v1.0. The vulnerable element is the Contact Information Handler’s file /user/profile.php, where manipulation of the mobilenumber argument enables improper access controls and can be exploited remotely. Public disclosure of the exploit is not...

CVE-2025-7155

CVE-2025-7155 affects PHPGurukul Online Notes Sharing System 1.0; the vulnerable area is the Cookie Handler’s /Dashboard file where manipulating the sessionid triggers a SQL injection. Exploitation is described as remote, with high impact on confidentiality, integrity, and availability; payloads ...