Phpgurukul

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-47445 1Phpgurukul 1Pre School Enrollment System Jun 17, 2026 Nov 15, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page.
CVE-2023-46026 1Phpgurukul 1Teacher Subject Allocation Management System Jun 17, 2026 Nov 14, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Cross Site Scripting (XSS) vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters.
CVE-2023-46025 1Phpgurukul 1Teacher Subject Allocation Management System Jun 17, 2026 Nov 14, 2023 N/A· v4 4.9 MEDIUM· v3 N/A· v2 SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter.
CVE-2023-46024 1Phpgurukul 1Teacher Subject Allocation Management System Jun 17, 2026 Nov 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter.
CVE-2023-6076 1Phpgurukul 1Restaurant Table Booking System Jun 17, 2026 Nov 10, 2023 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file booking-details.php of the component Reservati...Show more A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file booking-details.php of the component Reservation Status Handler. The manipulation of the argument bid leads to information disclosure. The attack can be launched remotely. The identifier VDB-244945 was assigned to this vulnerability.Show less
CVE-2023-6075 1Phpgurukul 1Restaurant Table Booking System Jun 17, 2026 Nov 10, 2023 N/A· v4 6.1 MEDIUM· v3 4.0 MEDIUM· v2 A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file index.php of the component Reservation Request Handler. The manipula...Show more A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file index.php of the component Reservation Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-244944.Show less
CVE-2023-6074 1Phpgurukul 1Restaurant Table Booking System Jun 17, 2026 Nov 10, 2023 N/A· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file check-status.php of the component Booking Reservation Han...Show more A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file check-status.php of the component Booking Reservation Handler. The manipulation leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-244943.Show less
CVE-2023-5804 1Phpgurukul 1Nipah Virus Testing Management System Jun 17, 2026 Oct 26, 2023 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument username le...Show more A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The identifier VDB-243617 was assigned to this vulnerability.Show less
CVE-2023-5794 1Phpgurukul 1Online Railway Catering Management System Jun 17, 2026 Oct 26, 2023 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability was found in PHPGurukul Online Railway Catering System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php of the component Login. The manipulation of the argume...Show more A vulnerability was found in PHPGurukul Online Railway Catering System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-243600.Show less
CVE-2023-46584 1Phpgurukul 1Nipah Virus Testing Management System Jun 17, 2026 Oct 25, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SQL Injection vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows a remote attacker to escalate privileges via a crafted request to the new-user-testing.php endpoint.
CVE-2023-46583 1Phpgurukul 1Nipah Virus Testing Management System Jun 17, 2026 Oct 25, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross-Site Scripting (XSS) vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows attackers to execute arbitrary code via a crafted payload injected into the State field.
CVE-2023-5303 1Phpgurukul 1Online Banquet Booking System Jun 17, 2026 Sep 30, 2023 N/A· v4 6.1 MEDIUM· v3 4.0 MEDIUM· v2 A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unknown function of the file /view-booking-detail.php of the component Account Detail Handler. The mani...Show more A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unknown function of the file /view-booking-detail.php of the component Account Detail Handler. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attack remotely. VDB-240942 is the identifier assigned to this vulnerability.Show less
CVE-2023-41614 1Phpgurukul 1Zoo Management System Jun 17, 2026 Sep 21, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 A stored cross-site scripting (XSS) vulnerability in the Add Animal Details function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Descrip...Show more A stored cross-site scripting (XSS) vulnerability in the Add Animal Details function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description of Animal parameter.Show less
CVE-2023-41593 1Phpgurukul 1Dairy Farm Shop Management System Jun 17, 2026 Sep 11, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow attackers to execute arbitrary web scripts and HTML via a crafted payload injected into the Category...Show more Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow attackers to execute arbitrary web scripts and HTML via a crafted payload injected into the Category and Category Field parameters.Show less
CVE-2023-41575 1Phpgurukul 1Blood Bank & Donor Management System Jun 17, 2026 Sep 8, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full...Show more Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full Name, Message, or Address parameters.Show less
CVE-2023-41615 1Phpgurukul 1Zoo Management System Jun 17, 2026 Sep 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields.
CVE-2023-41594 1Phpgurukul 1Dairy Farm Shop Management System Jun 17, 2026 Sep 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters.
CVE-2023-38890 1Phpgurukul 1Online Shopping Portal Jun 17, 2026 Aug 18, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to in...Show more Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.Show less
CVE-2023-37690 1Phpgurukul 1Maid Hiring Management System Jul 9, 2026 Aug 8, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Search Maid page.
CVE-2023-37689 1Phpgurukul 1Maid Hiring Management System Jul 9, 2026 Aug 8, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page.

Previous 1...444546...54 Next