Vulnerabilidades do Phpgurukul Billing System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Phpgurukul Billing System: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:phpgurukul:billing_system
CVE-2025-65380
Média · 6.5
CWE-89 02/12/2025
SQL Injection em Phpgurukul Billing System
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.
CVE-2025-65379
Média · 6.5
CWE-89 02/12/2025
SQL Injection em Phpgurukul Billing System
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is then concatenated directly into a backend SQL query.