CVE-2025-2658

The CVE-2025-2658 entry concerns PHPGurukul Online Security Guards Hiring System 1.0. The vulnerability affects an unknown functionality in /search-request.php where manipulating the searchdata parameter results in an SQL injection. The issue is exploitable remotely, and public disclosures exist....

CVE-2025-3137

The CVE-2025-3137 issue affects PHPGurukul Online Security Guards Hiring System 1.0. The vulnerable component is the /admin/changeimage.php file, where manipulating the editid parameter enables SQL injection. Attacks can be launched remotely and public disclosures exist. Documents consistently id...

CVE-2023-39551

PHPGurukul Online Security Guards Hiring System v1.0 is vulnerable to SQL Injection via osghs/admin/search.php. Root cause: unsafe handling of user input leading to SQL query manipulation. Impact given: high impact to confidentiality, integrity, and availability (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U...

CVE-2025-2665

The CVE-2025-2665 entry concerns PHPGurukul Online Security Guards Hiring System 1.0. The vulnerability is an SQL injection in the admin/bwdates-reports-details.php module, triggered by manipulation of the fromdate/todate parameters. It is possible to initiate the attack remotely, and the exploit...

CVE-2025-3138

CVE-2025-3138 affects PHPGurukul Online Security Guards Hiring System 1.0. The vulnerability is an SQL injection in the unknown functionality of /admin/edit-guard-detail.php, triggered by manipulating the editid parameter. It is reported as remote (network) and publicly disclosed. Multiple connec...

CVE-2023-36936

CVE-2023-36936 affects PHPGurukul Online Security Guards Hiring System v1.0. A cross-site scripting (XSS) flaw exists in the search booking box endpoint, enabling arbitrary script execution via a crafted payload. Documented impact is XSS with potential to affect confidentiality/integrity, and the...

CVE-2025-7791

PHPGurukul Online Security Guards Hiring System 1.0 contains a cross-site scripting vulnerability in the /admin/search.php file. The issue arises from unsafely handling the searchdata parameter, allowing remote attacker-controlled input to execute arbitrary scripts in a victim’s browser. Multiple...