CVE Intelligence

Vulnerabilidades de Phpgurukul

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Phpgurukul: 116 registro(s), com severidade, exploração e correções.

Student Record System 11Online Shopping Portal Project 10Beauty Parlour Management System 8News Portal 8Online Shopping Portal 7Small Crm 7Complaint Management System 6Hospital Management System 6Cyber Cafe Management System 5Online Course Registration 5Vehicle Record Management System 5News Portal Project 4Bank Locker Management System 4Hostel Management System 4Blood Donor Management System 3Curfew E-pass Management System 3Daily Expense Tracker System 3Student Record Management System 2Billing System 2Online Course Registration System 2Company Visitor Management System 2User Registration & Login and User Management System 2Student Information System 1Daily Expense Tracking System 1Maid Hiring Management System 1Directory Management System 1Staff Leave Management System 1Student Management System 1Gym Management System 1Tourism Management System 1Employee Record Management System 1

Somente exploradas (KEV) →

CVE-2024-44664 Média · 6.5 CWE-89 17/11/2025
SQL Injection em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.
CVE-2024-44661 Média · 5.4 CWE-79 17/11/2025
Cross-site Scripting (XSS) em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.
CVE-2024-44659 Crítica · 9.8 CWE-89 17/11/2025
SQL Injection em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.
CVE-2024-46335 Média · 4.6 CWE-79 17/11/2025
Cross-site Scripting (XSS) em Phpgurukul Complaint Management System
PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the fromdate and todate parameters in between-date-userreport.php.
CVE-2024-44663 Média · 6.5 CWE-89 17/11/2025
SQL Injection em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.
CVE-2024-44662 Média · 6.5 CWE-89 17/11/2025
SQL Injection em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.
CVE-2024-44660 Média · 6.5 CWE-89 17/11/2025
SQL Injection em Phpgurukul Online Shopping Portal
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php.
CVE-2024-44658 Média · 6.5 CWE-89 17/11/2025
SQL Injection em Phpgurukul Complaint Management System
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php.
CVE-2024-44655 Média · 6.1 CWE-79 17/11/2025
Cross-site Scripting (XSS) em Phpgurukul Complaint Management System
PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the search parameter in user-search.php.
CVE-2024-44654 Média · 6.5 CWE-89 17/11/2025
SQL Injection em Phpgurukul Complaint Management System
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php.
CVE-2024-44657 Média · 6.5 CWE-89 17/11/2025
SQL Injection em Phpgurukul Complaint Management System
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php.
CVE-2024-44648 Média · 6.5 CWE-89 17/11/2025
SQL Injection em Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.
CVE-2024-44647 Média · 6.1 CWE-79 17/11/2025
Cross-site Scripting (XSS) em Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.
CVE-2024-44644 Média · 6.5 CWE-89 17/11/2025
SQL Injection em Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.
CVE-2024-44641 Média · 6.5 CWE-89 17/11/2025
SQL Injection em Phpgurukul Small Crm
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.
CVE-2025-13247 Crítica · 9.8 CWE-89 16/11/2025
PHPGurukul Tourism Management System user-bookings.php sql injection
A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
CVE-2024-55016 Média · 6.5 CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php.
CVE-2024-44640 Média · 6.5 CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php.
CVE-2024-44639 Média · 6.5 CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php.
CVE-2024-44636 Média · 6.5 CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php.
CVE-2024-44635 Média · 6.1 CWE-79 14/11/2025
Cross-site Scripting (XSS) em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php.
CVE-2024-44633 Média · 6.5 CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php.
CVE-2024-44632 Média · 6.5 CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php.
CVE-2024-44630 Média · 6.5 CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country, state, city, padd, cadd, and gender.
CVE-2025-50363 Média · 5.4 CWE-79 03/11/2025
Cross-site Scripting (XSS) em Phpgurukul Maid Hiring Management System
Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the name field.