Phpgurukul Billing System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Phpgurukul Billing System: 2 record(s), with affected versions and fixes.cpe:2.3:a:phpgurukul:billing_system
CVE-2025-65380
Medium · 6.5
CWE-89 Dec 2, 2025
SQL Injection in Phpgurukul Billing System
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.
CVE-2025-65379
Medium · 6.5
CWE-89 Dec 2, 2025
SQL Injection in Phpgurukul Billing System
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is then concatenated directly into a backend SQL query.