← Back

Phpgurukul

phpgurukul

1,063 CVEs • 87 products

Products (87)

Click to collapse
Toggle
Small Crm
small_crm
News Portal
news_portal
Job Portal
job_portal

CVEs (1,063)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Phpgurukul
1Boat Booking System
Jun 17, 2026
Oct 19, 2024
5.3 MEDIUM· v4
9.8 CRITICAL· v3
6.5 MEDIUM· v2
A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file book-boat.php?bid=1 of the component Book a Boat Pag...Show more
A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file book-boat.php?bid=1 of the component Book a Boat Page. The manipulation of the argument bookingdatefrom/nopeople leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.Show less
1Phpgurukul
1Teachers Record Management System
Jun 17, 2026
Oct 16, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A Reflected Cross Site Scripting (XSS) vulnerability was found in /trms/listed- teachers.php in PHPGurukul Teachers Record Management System v2.1, which allows remote attackers to execute arbitrary code via "searchinput"...Show more
A Reflected Cross Site Scripting (XSS) vulnerability was found in /trms/listed- teachers.php in PHPGurukul Teachers Record Management System v2.1, which allows remote attackers to execute arbitrary code via "searchinput" POST request parameter.Show less
1Phpgurukul
1User Registration & Login And User Management System
Jun 17, 2026
Oct 15, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter.
1Phpgurukul
1User Registration & Login And User Management System
Jun 17, 2026
Oct 15, 2024
N/A· v4
7.6 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL commands to get unauthorize...Show more
A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the femail parameter in a POST HTTP request.Show less
1Phpgurukul
1User Registration & Login And User Management System
Jun 17, 2026
Oct 15, 2024
N/A· v4
7.6 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parame...Show more
A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parameter in a POST HTTP request.Show less
1Phpgurukul
1User Registration & Login And User Management System
Jun 17, 2026
Oct 15, 2024
N/A· v4
7.6 HIGH· v3
N/A· v2
A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary HTML code via the sea...Show more
A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary HTML code via the searchkey parameter in a POST HTTP request.Show less
1Phpgurukul
1User Registration & Login And User Management System
Jun 17, 2026
Oct 15, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to Cross Site Request Forgery (CSRF) via /edit-profile.php.
1Phpgurukul
1Hospital Management System
Jun 17, 2026
Oct 9, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php.
1Phpgurukul
1Online Shopping Portal
Jun 17, 2026
Sep 29, 2024
6.9 MEDIUM· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /shopping/admin/index.php of the component Admin Panel. The manipulation of t...Show more
A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /shopping/admin/index.php of the component Admin Panel. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.Show less
1Phpgurukul
1Dairy Farm Shop Management System
Jun 17, 2026
Sep 23, 2024
N/A· v4
5.9 MEDIUM· v3
N/A· v2
PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) via the pname parameter in add_product.php and edit_product.php.
1Phpgurukul
1Job Portal
Jun 17, 2026
Sep 5, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user t...Show more
Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through user_email parameter in /jobportal/admin/login.php.Show less
1Phpgurukul
1Job Portal
Jun 17, 2026
Sep 5, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user t...Show more
Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through multiple parameters in /jobportal/index.php.Show less
1Phpgurukul
1Job Portal
Jun 17, 2026
Sep 5, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user t...Show more
Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through JOBID and USERNAME parameters in /jobportal/process.php.Show less
1Phpgurukul
1Job Portal
Jun 17, 2026
Sep 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it.
1Phpgurukul
1Job Portal
Jun 17, 2026
Sep 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it.
1Phpgurukul
1Job Portal
Jun 17, 2026
Sep 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it.
1Phpgurukul
1Job Portal
Jun 17, 2026
Sep 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it.
1Phpgurukul
1Job Portal
Jun 17, 2026
Sep 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored in it.
1Phpgurukul
1Job Portal
Jun 17, 2026
Sep 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it.
1Phpgurukul
1Job Portal
Jun 17, 2026
Sep 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information stored in it.