CVE-2024-25202

CVE-2024-25202 is a cross-site scripting vulnerability in the Phpgurukul User Registration & Login and User Management System v1.0. The vulnerability affects the system’s search bar and enables attackers to run arbitrary code. Reported metrics indicate a CVSS v3.1 base score of 6.1 (Network acces...

CVE-2024-28323

The vulnerability CVE-2024-28323 affects Phpgurukul User Registration & Login and User Management System v3.1. The bwdates-report-result.php script accepts user-provided date inputs without proper validation, enabling SQL injection via that input path. This could impact data integrity and confide...

CVE-2025-28011

CVE-2025-28011 affects PHPGurukul’s User Registration & Login and User Management System v3.3. The vulnerability is in loginsystem/change-password.php where the currentpassword POST parameter is mishandled, enabling a SQL injection that can allow remote attackers to execute arbitrary code. The do...

CVE-2024-48278

CVE-2024-48278 affects Phpgurukul User Registration & Login and User Management System 3.2. It is a CSRF vulnerability exploitable via the /edit-profile.php endpoint. Practical impact is unauthorized actions performed on behalf of an authenticated user. Remediation from PT-2024-33065 and related ...

CVE-2025-28015

CVE-2025-28015 describes an HTML Injection in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. The vulnerability allows an attacker to inject HTML via the fname, lname, and contact parameters, with a local attack vector, requiring user inte...

CVE-2024-50843

CVE-2024-50843 affects PHPGurukul User Registration & Login and User Management System 3.2. a directory listing issue in the assets path (/loginsystem/assets) allows remote attackers to access sensitive files and directories. The primary impact is exposure of confidential data due to misconfigure...

CVE-2024-48280

CVE-2024-48280 affects PHPGurukul User Registration & Login and User Management System 3.2. A SQL Injection vulnerability exists in /search-result.php, exploitable via the fromdate parameter in a POST request, allowing remote attackers to execute arbitrary SQL. This is supported by multiple sourc...

CVE-2024-48279

PHPGurukul User Registration & Login and User Management System 3.2 has a HTML Injection vulnerability in /search-result.php. The searchkey parameter (POST) allows remote attackers to inject/execute arbitrary HTML. Root cause is not detailed beyond this; CVSS v3.1 vector indicates high impact wit...

CVE-2024-48282

Summary of CVE-2024-48282 (PHPGurukul U&R & UMS 3.2) : A SQL Injection flaw exists in the /password-recovery.php endpoint, allowing remote attackers to manipulate SQL via the POST parameter femail and gain unauthorized database access. Evidence across sources confirms the vulnerability in PHPGuru...

CVE-2024-48283

Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter. Affects component: admin search results handler; root cause: SQLi in the search-key processing. CVSS 3.1 base score 9.8 (CRITICAL) with netw...

CVE-2024-48284

A Reflected Cross-Site Scripting (XSS) in PHPGurukul User Registration & Login and User Management System 3.2 affects the /search-result.php page. The issue is exploitable via the searchkey parameter in a POST request, enabling remote attackers to run arbitrary scripts. CVSS details indicate MEDI...

CVE-2025-45949

The CVE-2025-45949 entry concerns PHPGurukul User Registration & Login and User Management System v3.3. The vulnerability is in the /loginsystem/change-password.php component within the user panel, caused by improper handling of session data which enables a Session Hijacking attack. This exposes ...

CVE-2025-2050

CVE-2025-2050 affects PHPGurukul User Registration & Login and User Management System version 3.3. The issue is in the login.php file where manipulating the email parameter enables a SQL injection, allowing remote exploitation. Public disclosure is noted in sources; exploitation details are not p...

CVE-2020-24723

CVE-2020-24723 affects PHPGurukul Admin Panel: User Registration & Login / User Management System with admin panel version 2.1. A cross-site scripting (XSS) vulnerability exists on the Registration page. The connected Red Hat advisory and other sources corroborate an XSS issue in this admin-panel...

CVE-2024-11817

The CVE-2024-11817 entry concerns PHPGurukul User Registration & Login and User Management System v1.0. It specifies a vulnerability in the /admin/index.php file where manipulation of the username parameter enables SQL injection. The attack can be launched remotely and the exploit has been disclo...

CVE-2020-25952

CVE-2020-25952 affects PHPGurukul User Registration & Login and User Management System With admin panel v2.1. Description and connected sources confirm a SQL injection flaw that lets remote attackers execute arbitrary SQL and bypass authentication by exploiting unsafely constructed queries in the...

CVE-2024-11818

CVE-2024-11818 affects PHPGurukul User Registration & Login and User Management System 1.0. The vulnerability is in /signup.php where manipulating the email parameter causes SQL injection. It is exploitable remotely and has been disclosed publicly. Connected sources also note a recommended tempor...

CVE-2025-4934

CVE-2025-4934 affects PHPGurukul User Registration & Login and User Management System 3.3. The vulnerability is in unknown code of /edit-profile.php where manipulating the Contact parameter triggers an SQL injection. Exploitation is possible remotely and has been disclosed publicly. Multiple sour...

CVE-2025-8157

PHPGurukul User Registration & Login and User Management 3.3 is affected. The vulnerability exists in the /admin/lastthirtyays-reg-users.php file where manipulating the ID argument enables SQL injection. The issue can be triggered remotely, and public exploitation has been disclosed. Root cause: ...

CVE-2025-8158

CVE-2025-8158 affects PHPGurukul Login and User Management System 3.3. The vulnerability is in unknown code within /admin/yesterday-reg-users.php, where manipulating the ID parameter leads to SQL injection. Exploitation is remote and the exploit has been publicly disclosed; CVSS data indicate a h...

CVE-2025-7543

The CVE-2025-7543 entry concerns PHPGurukul User Registration & Login and User Management System version 3.3. A SQL injection vulnerability exists in an unknown part of the file /admin/manage-users.php, triggered by manipulating the ID argument. The flaw allows remote exploitation and exploitatio...

CVE-2025-8156

The CVE-2025-8156 issue is an SQL injection in PHPGurukul User Registration & Login and User Management v3.3, triggered by manipulating the ID argument in /admin/lastsevendays-reg-users.php. It can be exploited remotely and the exploit has been publicly disclosed. Related sources (PT-2025-30752) ...

CVE-2025-7542

PHPGurukul User Registration & Login and User Management System 3.3 contains a SQL injection in /admin/user-profile.php triggered by manipulating the uid parameter. The vulnerability can be exploited remotely and has publicly disclosed exploits. No patch/versioned remediation is provided in the s...

CVE-2025-28016

The CVE-2025-28016 entry concerns the PHPGurukul User Registration & Login and User Management System v3.3. A Reflected Cross-Site Scripting (XSS) vulnerability exists in loginsystem/edit-profile.php, allowing remote attackers to execute arbitrary JavaScript via the fname, lname, and contact para...