CVE-2025-4031

CVE-2025-4031 affects PHPGurukul Pre-School Enrollment System v1.0; the issue is a SQL injection in /admin/aboutus.php caused by unsafely handling the pagetitle parameter. This remote vulnerability is rated critical by the primary sources, with potential high impact on confidentiality, integrity,...

CVE-2025-1966

CVE-2025-1966 affects PHPGurukul Pre-School Enrollment System 1.0. The vulnerability is an SQL injection in the /admin/index.php file caused by manipulating the username parameter. It is exploitable remotely, and publicly disclosed exploits exist. No remediation or patch details are provided in t...

CVE-2025-2362

CVE-2025-2362 affects PHPGurukul Pre-School Enrollment System version 1.0. The issue is a SQL injection in the /admin/contact-us.php endpoint triggered by the mobnum argument. It is described as remotely exploitable and publicly disclosed. Multiple sources reinforce potential broad impact on conf...

CVE-2025-4154

CVE-2025-4154 affects PHPGurukul Pre-School Enrollment System 1.0. The vulnerability lies in the /admin/enrollment-details.php file where manipulating the Status parameter triggers a SQL injection. Exploitation is network-based and does not require user interaction, with the attack described as r...

CVE-2025-2090

CVE-2025-2090 affects PHPGurukul Pre-School Enrollment System 1.0, specifically the Sub Admin Handler component and its /admin/add-subadmin.php functionality. The issue is improper access controls in that file, enabling potential unauthorized actions. Multiple connected sources (NVD/NVD-derived f...

CVE-2025-28072

The CVE-2025-28072 entry concerns PHPGurukul Pre-School Enrollment System, where the manage-teachers.php module is vulnerable to Directory Traversal due to improper filtering of user input paths. This summary consolidates multiple references reporting the same issue; the CVSS 3.1 vector indicates...

CVE-2025-4110

CVE-2025-4110 affects PHPGurukul Pre-School Enrollment System v1.0. Multiple connected sources confirm a SQL injection in the /admin/edit-teacher.php file via the mobilenumber parameter, with remote exploitation and the exploit disclosed publicly. The issue impacts unknown functionality of that f...

CVE-2025-4109

CVE-2025-4109 affects PHPGurukul Pre-School Enrollment System 1.0. The vulnerability is a SQL injection in the file /admin/edit-subadmin.php triggered by the mobilenumber parameter. It can be exploited remotely and data theft is possible as per sources. Exploit has been disclosed publicly. Mitiga...

CVE-2025-2034

CVE-2025-2034 affects PHPGurukul Pre-School Enrollment System 1.0. Affected component: /admin/edit-class.php?cid=1. The manipulation of parameters classname, capacity, and classtiming leads to SQL injection. Attack can be launched remotely and the exploit has been disclosed publicly. Documented i...

CVE-2025-4111

The CVE-2025-4111 entry concerns PHPGurukul Pre-School Enrollment System 1.0. Affected component: /admin/visitor-details.php. Root cause: manipulation of the Status parameter enables SQL injection, allowing remote attack space. Public exploit information exists across multiple sources, indicating...

CVE-2025-2088

CVE-2025-2088 affects PHPGurukul Pre-School Enrollment System up to v1.0. A vulnerability exists in an unknown function of /admin/profile.php where manipulating the arguments fullname, emailid, or mobileNumber leads to SQL injection. Remote exploitation is possible, and the exploit has been discl...

CVE-2024-54790

CVE-2024-54790 affects PHPGurukul Pre-School Enrollment System v1.0. The vulnerability is a SQL Injection in /index.php via the visittime parameter, enabling remote attackers to execute arbitrary code. The CVSS vector indicates network access with high impact to confidentiality, integrity, and av...

CVE-2024-54810

CVE-2024-54810 affects PHPGurukul Pre-School Enrollment System Project v1.0. The vulnerability is a SQL Injection in /preschool/admin/password-recovery.php that allows remote attackers to execute arbitrary code via the mobileno parameter. Base metrics indicate CRITICAL impact (CVSS 3.1: AV:N/AC:L...

CVE-2023-47445

CVE-2023-47445 affects Pre-School Enrollment version 1.0; a SQL Injection vulnerability exists in the username parameter of the preschool/admin/ page. Root cause is improper input handling allowing crafted input to alter SQL queries, leading to potential confidentiality, integrity, and availabili...

CVE-2023-47446

Affected software: PHPGurukul Pre-School Enrollment (Web-based system) v1.0. Vulnerability: Cross-Site Scripting (XSS) on profile.php via the fullname parameter. Root cause (as stated): XSS vulnerability; details on input handling/output encoding not provided. Impact (as stated): enables executio...

CVE-2025-50350

CVE-2025-50350 affects PHPGurukul Pre-School Enrollment System Project v1.0. The issue is a directory traversal vulnerability in manage-classes.php caused by insufficient path validation, enabling an attacker to access sensitive files. CVSS details: AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N; base score...

CVE-2025-50348

The CVE-2025-50348 entry corresponds to PHPGurukul Pre-School Enrollment System Project V1.0, where the vulnerability is a Directory Traversal in update-class-pic.php. The root cause is lack of validity checking of paths when processing directory requests, which can lead to unauthorized access to...

CVE-2025-6320

CVE-2025-6320 affects PHPGurukul Pre-School Enrollment System 1.0. A vulnerability in the file /admin/add-class.php arises from manipulation of the classname parameter, leading to SQL injection. Descriptions from CNVD/CNNVD/Red Hat and other sources indicate remote exploitation and that the explo...

CVE-2025-6321

CVE-2025-6321 affects PHPGurukul Pre-School Enrollment System 1.0. The vulnerability is an SQL injection in /admin/add-subadmin.php via the sadminusername parameter. It can be exploited remotely and the exploit has been disclosed publicly. Documented impact is data confidentiality/integrity/avail...

CVE-2025-6319

CVE-2025-6319 affects PHPGurukul Pre-School Enrollment System 1.0. Multiple connected sources report a SQL injection in /admin/add-teacher.php via the tsubject/tsubject parameter, enabling remote exploitation and potential unauthorized access to database data. Root cause: unsafely processed exter...

CVE-2025-6318

CVE-2025-6318 affects PHPGurukul Pre-School Enrollment System v1.0, where an attacker can exploit SQL injection in the parameter Username in /admin/check_availability.php. Multiple connected sources (CNVD/CNNVD/Red Hat references and PT Security enrichment) confirm remote exploitation with minima...

CVE-2025-6322

The CVE-2025-6322 entry concerns PHPGurukul Pre-School Enrollment System v1.0 where the vulnerability resides in /visit.php via the gname parameter, enabling SQL injection. Remote attacker access is possible and public exploits exist. Public-facing sources indicate no official patch/version detai...

CVE-2025-50349

The CVE-2025-50349 entry concerns a Directory Traversal vulnerability in PHPGurukul Pre-School Enrollment System Project V1.0, specifically in update-teacher-pic.php. The root cause described across connected sources is lack of proper validation of file paths when processing directory requests, e...

CVE-2025-51045

Summary : CVE-2025-51045 affects Phpgurukul Pre-School Enrollment System 1.0. The vulnerability is a SQL injection in the /admin/password-recovery.php endpoint caused by insufficient validation of the username parameter. The CVSS v3.1 base score is 6.5 (Medium) with network attack vector, low com...

CVE-2025-6323

The CVE-2025-6323 entry describes a SQL injection flaw in PHPGurukul Pre-School Enrollment System 1.0, in the file /enrollment.php, triggered by the fathername parameter. Root cause: lack of input validation/unsafe concatenation enables remote attacker to modify SQL statements. Impact: potential ...