CVE Intelligence

Phpgurukul vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Phpgurukul products: 116 record(s), with severity, exploitation and fixes.

Student Record System 11Online Shopping Portal Project 10Beauty Parlour Management System 8News Portal 8Online Shopping Portal 7Small Crm 7Complaint Management System 6Hospital Management System 6Cyber Cafe Management System 5Online Course Registration 5Vehicle Record Management System 5News Portal Project 4Bank Locker Management System 4Hostel Management System 4Blood Donor Management System 3Curfew E-pass Management System 3Daily Expense Tracker System 3Student Record Management System 2Billing System 2Online Course Registration System 2Company Visitor Management System 2User Registration & Login and User Management System 2Student Information System 1Daily Expense Tracking System 1Maid Hiring Management System 1Directory Management System 1Staff Leave Management System 1Student Management System 1Gym Management System 1Tourism Management System 1Employee Record Management System 1

Exploited only (KEV) →

CVE-2024-44664 Medium · 6.5 CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.
CVE-2024-44661 Medium · 5.4 CWE-79 Nov 17, 2025
Cross-site Scripting (XSS) in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.
CVE-2024-44659 Critical · 9.8 CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.
CVE-2024-46335 Medium · 4.6 CWE-79 Nov 17, 2025
Cross-site Scripting (XSS) in Phpgurukul Complaint Management System
PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the fromdate and todate parameters in between-date-userreport.php.
CVE-2024-44663 Medium · 6.5 CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.
CVE-2024-44662 Medium · 6.5 CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.
CVE-2024-44660 Medium · 6.5 CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php.
CVE-2024-44658 Medium · 6.5 CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Complaint Management System
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php.
CVE-2024-44655 Medium · 6.1 CWE-79 Nov 17, 2025
Cross-site Scripting (XSS) in Phpgurukul Complaint Management System
PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the search parameter in user-search.php.
CVE-2024-44654 Medium · 6.5 CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Complaint Management System
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php.
CVE-2024-44657 Medium · 6.5 CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Complaint Management System
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php.
CVE-2024-44648 Medium · 6.5 CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.
CVE-2024-44647 Medium · 6.1 CWE-79 Nov 17, 2025
Cross-site Scripting (XSS) in Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.
CVE-2024-44644 Medium · 6.5 CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.
CVE-2024-44641 Medium · 6.5 CWE-89 Nov 17, 2025
SQL Injection in Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.
CVE-2025-13247 Critical · 9.8 CWE-89 Nov 16, 2025
PHPGurukul Tourism Management System user-bookings.php sql injection
A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
CVE-2024-55016 Medium · 6.5 CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php.
CVE-2024-44640 Medium · 6.5 CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php.
CVE-2024-44639 Medium · 6.5 CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php.
CVE-2024-44636 Medium · 6.5 CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php.
CVE-2024-44635 Medium · 6.1 CWE-79 Nov 14, 2025
Cross-site Scripting (XSS) in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php.
CVE-2024-44633 Medium · 6.5 CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php.
CVE-2024-44632 Medium · 6.5 CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php.
CVE-2024-44630 Medium · 6.5 CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country, state, city, padd, cadd, and gender.
CVE-2025-50363 Medium · 5.4 CWE-79 Nov 3, 2025
Cross-site Scripting (XSS) in Phpgurukul Maid Hiring Management System
Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the name field.