CVE-2025-2090

CVE-2025-2090 affects PHPGurukul Pre-School Enrollment System 1.0, specifically the Sub Admin Handler component and its /admin/add-subadmin.php functionality. The issue is improper access controls in that file, enabling potential unauthorized actions. Multiple connected sources (NVD/NVD-derived f...

CVE-2025-1966

CVE-2025-1966 affects PHPGurukul Pre-School Enrollment System 1.0. The vulnerability is an SQL injection in the /admin/index.php file caused by manipulating the username parameter. It is exploitable remotely, and publicly disclosed exploits exist. No remediation or patch details are provided in t...

CVE-2025-4109

CVE-2025-4109 affects PHPGurukul Pre-School Enrollment System 1.0. The vulnerability is a SQL injection in the file /admin/edit-subadmin.php triggered by the mobilenumber parameter. It can be exploited remotely and data theft is possible as per sources. Exploit has been disclosed publicly. Mitiga...

CVE-2025-2362

CVE-2025-2362 affects PHPGurukul Pre-School Enrollment System version 1.0. The issue is a SQL injection in the /admin/contact-us.php endpoint triggered by the mobnum argument. It is described as remotely exploitable and publicly disclosed. Multiple sources reinforce potential broad impact on conf...

CVE-2025-4031

CVE-2025-4031 affects PHPGurukul Pre-School Enrollment System v1.0; the issue is a SQL injection in /admin/aboutus.php caused by unsafely handling the pagetitle parameter. This remote vulnerability is rated critical by the primary sources, with potential high impact on confidentiality, integrity,...

CVE-2025-4154

CVE-2025-4154 affects PHPGurukul Pre-School Enrollment System 1.0. The vulnerability lies in the /admin/enrollment-details.php file where manipulating the Status parameter triggers a SQL injection. Exploitation is network-based and does not require user interaction, with the attack described as r...

CVE-2025-28072

The PHPGurukul Pre-School Enrollment System is vulnerable to a Directory Traversal vulnerability (CWE-22) located in the manage-teachers.php file. The root cause is the improper filtering of user-provided input paths, which could allow an attacker to perform unauthorized access to sensitive files...

CVE-2025-4110

CVE-2025-4110 affects PHPGurukul Pre-School Enrollment System v1.0. Multiple connected sources confirm a SQL injection in the /admin/edit-teacher.php file via the mobilenumber parameter, with remote exploitation and the exploit disclosed publicly. The issue impacts unknown functionality of that f...

CVE-2025-2034

CVE-2025-2034 affects PHPGurukul Pre-School Enrollment System 1.0. Affected component: /admin/edit-class.php?cid=1. The manipulation of parameters classname, capacity, and classtiming leads to SQL injection. Attack can be launched remotely and the exploit has been disclosed publicly. Documented i...

CVE-2025-2088

CVE-2025-2088 affects PHPGurukul Pre-School Enrollment System up to v1.0. A vulnerability exists in an unknown function of /admin/profile.php where manipulating the arguments fullname, emailid, or mobileNumber leads to SQL injection. Remote exploitation is possible, and the exploit has been discl...

CVE-2025-4111

The CVE-2025-4111 entry concerns PHPGurukul Pre-School Enrollment System 1.0. Affected component: /admin/visitor-details.php. Root cause: manipulation of the Status parameter enables SQL injection, allowing remote attack space. Public exploit information exists across multiple sources, indicating...

CVE-2024-54810

A SQL Injection vulnerability exists in the PHPGurukul Pre-School Enrollment System Project v1.0 within the /preschool/admin/password-recovery.php file. The root cause is the improper neutralization of special elements in the mobileno parameter, which allows remote attackers to execute arbitrary ...

CVE-2024-54790

A SQL Injection vulnerability exists in the PHPGurukul Pre-School Enrollment System v1.0 within the /index.php file. This flaw is caused by improper neutralization of special elements used in an SQL command, specifically via the visittime parameter. Remote attackers can exploit this to execute ar...

CVE-2023-47445

CVE-2023-47445 affects Pre-School Enrollment version 1.0; a SQL Injection vulnerability exists in the username parameter of the preschool/admin/ page. Root cause is improper input handling allowing crafted input to alter SQL queries, leading to potential confidentiality, integrity, and availabili...

CVE-2025-50350

The PHPGurukul Pre-School Enrollment System Project v1.0 is vulnerable to a Directory Traversal vulnerability in the manage-classes.php file. The root cause is a lack of validity checking of paths when handling directory requests, which could allow an attacker to obtain sensitive information . As...

CVE-2023-47446

Affected software: PHPGurukul Pre-School Enrollment (Web-based system) v1.0. Vulnerability: Cross-Site Scripting (XSS) on profile.php via the fullname parameter. Root cause (as stated): XSS vulnerability; details on input handling/output encoding not provided. Impact (as stated): enables executio...

CVE-2025-50348

The PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to a Directory Traversal flaw in the update-class-pic.php file. The root cause is a lack of validity checking on paths when the application processes directory requests. An attacker can exploit this vulnerability to obtain sen...

CVE-2025-6321

CVE-2025-6321 affects PHPGurukul Pre-School Enrollment System 1.0. The vulnerability is an SQL injection in /admin/add-subadmin.php via the sadminusername parameter. It can be exploited remotely and the exploit has been disclosed publicly. Documented impact is data confidentiality/integrity/avail...

CVE-2025-6318

CVE-2025-6318 affects PHPGurukul Pre-School Enrollment System v1.0, where an attacker can exploit SQL injection in the parameter Username in /admin/check_availability.php. Multiple connected sources (CNVD/CNNVD/Red Hat references and PT Security enrichment) confirm remote exploitation with minima...

CVE-2025-6320

CVE-2025-6320 affects PHPGurukul Pre-School Enrollment System 1.0. A vulnerability in the file /admin/add-class.php arises from manipulation of the classname parameter, leading to SQL injection. Descriptions from CNVD/CNNVD/Red Hat and other sources indicate remote exploitation and that the explo...

CVE-2025-6319

CVE-2025-6319 affects PHPGurukul Pre-School Enrollment System 1.0. Multiple connected sources report a SQL injection in /admin/add-teacher.php via the tsubject/tsubject parameter, enabling remote exploitation and potential unauthorized access to database data. Root cause: unsafely processed exter...

CVE-2025-6322

The CVE-2025-6322 entry concerns PHPGurukul Pre-School Enrollment System v1.0 where the vulnerability resides in /visit.php via the gname parameter, enabling SQL injection. Remote attacker access is possible and public exploits exist. Public-facing sources indicate no official patch/version detai...

CVE-2025-51045

The Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability within the /admin/password-recovery.php file. The root cause is the insufficient validation of the username parameter, which allows an attacker to construct malicious inputs to execute unauthorized SQL commands...

CVE-2025-6323

The CVE-2025-6323 entry describes a SQL injection flaw in PHPGurukul Pre-School Enrollment System 1.0, in the file /enrollment.php, triggered by the fathername parameter. Root cause: lack of input validation/unsafe concatenation enables remote attacker to modify SQL statements. Impact: potential ...

CVE-2025-50349

The PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to a Directory Traversal vulnerability within the update-teacher-pic.php file. This issue is caused by a lack of validity checking on paths when processing directory requests. An attacker can exploit this flaw to obtain sensit...