CVE-2024-25202

The Phpgurukul User Registration & Login and User Management System 1.0 is vulnerable to a Cross Site Scripting (XSS) flaw in its search bar functionality. The vulnerability specifically affects files search-result.php , search-visitor.php , and potentially search-bar.php . This flaw allows an at...

CVE-2024-28323

The Phpgurukul User Registration & Login and User Management System version 3.1 is vulnerable to SQL injection due to improper input validation. The flaw exists in the bwdates-report-result.php file, where the script processes user-provided date inputs without sufficient validation. An attacker c...

CVE-2025-28011

A SQL Injection vulnerability exists in the loginsystem/change-password.php component of the PHPGurukul User Registration & Login and User Management System v3.3 . Remote attackers can exploit the currentpassword POST request parameter to execute arbitrary code. A proof-of-concept (PoC) for this ...

CVE-2025-28015

The PHPGurukul User Registration & Login and User Management System V3.3 is affected by an HTML Injection vulnerability in the loginsystem/edit-profile.php component. This flaw occurs because the application fails to properly neutralize script-related HTML tags, allowing remote attackers to execu...

CVE-2024-48278

The Phpgurukul User Registration & Login and User Management System version 3.2 is vulnerable to a Cross Site Request Forgery (CSRF) . The flaw exists in the /edit-profile.php API endpoint, which allows an attacker to perform unauthorized actions on behalf of a user. To remediate this, it is reco...

CVE-2024-48282

A SQL Injection vulnerability exists in the PHPGurukul User Registration & Login and User Management System version 3.2 . The flaw is located in the /password-recovery.php file, where the femail parameter in a POST HTTP request is improperly neutralized. This allows remote attackers to execute ar...

CVE-2024-48280

A SQL Injection vulnerability exists in the PHPGurukul User Registration & Login and User Management System version 3.2 . The flaw is located in the /search-result.php file, where remote attackers can execute arbitrary SQL commands by manipulating the fromdate parameter within a POST HTTP request...

CVE-2024-50843

A Directory listing and path traversal (CWE-22) vulnerability exists in PHPGurukul User Registration & Login and User Management System version 3.2 . This flaw allows remote attackers to access sensitive files and directories by interacting with the /loginsystem/assets API endpoint. While practic...

CVE-2024-48283

Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in the /admin//search-result.php endpoint. The root cause is the improper neutralization of special elements used in an SQL command via the searchkey parameter. This vulnerability allows for potenti...

CVE-2024-48279

An HTML Injection vulnerability exists in the /search-result.php component of PHPGurukul User Registration & Login and User Management System 3.2 . A remote attacker can execute arbitrary HTML code by submitting a malicious payload via the searchkey parameter in a POST HTTP request . Specific det...

CVE-2024-48284

A Reflected Cross-Site Scripting (XSS) in PHPGurukul User Registration & Login and User Management System 3.2 affects the /search-result.php page. The issue is exploitable via the searchkey parameter in a POST request, enabling remote attackers to run arbitrary scripts. CVSS details indicate MEDI...

CVE-2025-45949

A critical vulnerability exists in PHPGurukul User Registration & Login and User Management System V3.3 within the /loginsystem/change-password.php file of the Change Password component. The root cause is the improper handling of session data , which enables a remote Session Hijacking attack. Thi...

CVE-2025-2050

CVE-2025-2050 affects PHPGurukul User Registration & Login and User Management System version 3.3. The issue is in the login.php file where manipulating the email parameter enables a SQL injection, allowing remote exploitation. Public disclosure is noted in sources; exploitation details are not p...

CVE-2020-24723

CVE-2020-24723 affects PHPGurukul Admin Panel: User Registration & Login / User Management System with admin panel version 2.1. A cross-site scripting (XSS) vulnerability exists on the Registration page. The connected Red Hat advisory and other sources corroborate an XSS issue in this admin-panel...

CVE-2020-25952

CVE-2020-25952 affects PHPGurukul User Registration & Login and User Management System With admin panel v2.1. Description and connected sources confirm a SQL injection flaw that lets remote attackers execute arbitrary SQL and bypass authentication by exploiting unsafely constructed queries in the...

CVE-2024-11817

The CVE-2024-11817 entry concerns PHPGurukul User Registration & Login and User Management System v1.0. It specifies a vulnerability in the /admin/index.php file where manipulation of the username parameter enables SQL injection. The attack can be launched remotely and the exploit has been disclo...

CVE-2025-4934

CVE-2025-4934 affects PHPGurukul User Registration & Login and User Management System 3.3. The vulnerability is in unknown code of /edit-profile.php where manipulating the Contact parameter triggers an SQL injection. Exploitation is possible remotely and has been disclosed publicly. Multiple sour...

CVE-2024-11818

CVE-2024-11818 affects PHPGurukul User Registration & Login and User Management System 1.0. The vulnerability is in /signup.php where manipulating the email parameter causes SQL injection. It is exploitable remotely and has been disclosed publicly. Connected sources also note a recommended tempor...

CVE-2025-8157

PHPGurukul User Registration & Login and User Management 3.3 is affected. The vulnerability exists in the /admin/lastthirtyays-reg-users.php file where manipulating the ID argument enables SQL injection. The issue can be triggered remotely, and public exploitation has been disclosed. Root cause: ...

CVE-2025-8158

CVE-2025-8158 affects PHPGurukul Login and User Management System 3.3. The vulnerability is in unknown code within /admin/yesterday-reg-users.php, where manipulating the ID parameter leads to SQL injection. Exploitation is remote and the exploit has been publicly disclosed; CVSS data indicate a h...

CVE-2025-28016

The PHPGurukul User Registration & Login and User Management System version V3.3 is susceptible to a Reflected Cross-Site Scripting (XSS) vulnerability in the loginsystem/edit-profile.php file. The root cause is the unverified input of the fname, lname, and contact parameters, which allows remote...

CVE-2025-8156

The CVE-2025-8156 issue is an SQL injection in PHPGurukul User Registration & Login and User Management v3.3, triggered by manipulating the ID argument in /admin/lastsevendays-reg-users.php. It can be exploited remotely and the exploit has been publicly disclosed. Related sources (PT-2025-30752) ...

CVE-2025-7543

The CVE-2025-7543 entry concerns PHPGurukul User Registration & Login and User Management System version 3.3. A SQL injection vulnerability exists in an unknown part of the file /admin/manage-users.php, triggered by manipulating the ID argument. The flaw allows remote exploitation and exploitatio...

CVE-2025-7542

PHPGurukul User Registration & Login and User Management System 3.3 contains a SQL injection in /admin/user-profile.php triggered by manipulating the uid parameter. The vulnerability can be exploited remotely and has publicly disclosed exploits. No patch/versioned remediation is provided in the s...