CVE-2023-46025

The CVE-2023-46025 entry affects phpgurukul Teacher Subject Allocation Management System 1.0, specifically the teacher-info.php file. A SQL Injection vulnerability arises from inadequate validation of the editid parameter, enabling attackers to execute arbitrary SQL and potentially exfiltrate sen...

CVE-2023-46024

The CVE-2023-46024 entry concerns the phpgurukul Teacher Subject Allocation Management System 1.0. Affected software/component: index.php in the application. Vulnerable vector: the searchdata parameter, where insufficient validation protection enables SQL injection. Root cause: lack of input vali...

CVE-2025-4241

CVE-2025-4241 affects PHPGurukul Teacher Subject Allocation Management System 1.0. The vulnerability is in the file /admin/search.php where manipulating the argument searchdata enables SQL injection. Exploitation is possible remotely and exploits have been disclosed publicly. Multiple sources (NV...

CVE-2023-46026

CVE-2023-46026 concerns a Cross Site Scripting (XSS) vulnerability in profile.php of phpgurukul Teacher Subject Allocation Management System 1.0. The root cause cited across connected sources is insufficient input validation/escaping for the adminname and email parameters, allowing arbitrary code...

CVE-2025-5557

PHPGurukul Teacher Subject Allocation Management System 1.0 is affected by a SQL injection in /admin/edit-course.php via the editid parameter. The vulnerability allows remote exploitation and has publicly disclosed exploits, with attacker-controlled SQL commands able to access sensitive data. Mul...

CVE-2025-5556

The CVE-2025-5556 affects PHPGurukul Teacher Subject Allocation Management System v1.0, specifically the /admin/edit-teacher-info.php file. The root cause is an unsanitized editid parameter that enables SQL injection, allowing remote exploitation. Multiple connected sources corroborate a public e...

CVE-2025-5558

The CVE-2025-5558 issue affects PHPGurukul Teacher Subject Allocation Management System 1.0, specifically the /admin/changeimage.php file. The root cause is unsafely handled input in the editid parameter, leading to SQL injection. This allows remote attacker access and could disclose or manipulat...

CVE-2023-6649

CVE-2023-6649 affects PHPGurukul Teacher Subject Allocation Management System v1.0, specifically the index.php file. The vulnerability is a cross-site scripting (XSS) flaw triggered by manipulating the input parameter in the searchdata argument (e.g., ). The issue is exploitable remotely and, acc...

CVE-2023-6766

The CVE affects PHPGurukul Teacher Subject Allocation Management System 1.0, specifically the /admin/course.php component of the Delete Course Handler. Manipulating the delid parameter triggers Cross-Site Request Forgery (CSRF) and can be exploited remotely; the exploit has been publicly disclose...

CVE-2023-6653

The CVE-2023-6653 issue affects PHPGurukul Teacher Subject Allocation Management System 1.0, specifically the /admin/subject.php component for creating a new Subject. The root cause is manipulation of the cid parameter, leading to cross-site request forgery (CSRF). The vulnerability can be trigge...