phpgurukul Vulnerability Advisory Catalog

Total 1,060 security vulnerabilities recorded for phpgurukul software and firmware.

← Back to All Vendors
Component: cyber_cafe_management_system

A stored cross-site scripting (XSS) vulnerability exists in Cyber Cafe Management System v1.0. An authenticated attacker can inject arbitrary JavaScri...

📅 2026-01-15
CVSS 6.1 Dossier →
CVE-2025-69992 CRITICAL
Component: news_portal

phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server withou...

📅 2026-01-13
CVSS 9.8 Dossier →
CVE-2025-69991 CRITICAL
Component: news_portal

phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php....

📅 2026-01-13
CVSS 9.8 Dossier →
CVE-2025-69990 CRITICAL
Component: news_portal

phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php. The parameter file can cause any file to be delet...

📅 2026-01-13
CVSS 9.1 Dossier →
CVE-2026-0803 MEDIUM
Component: online_course_registration_system

A vulnerability was found in PHPGurukul Online Course Registration System up to 3.1. This affects an unknown part of the file /enroll.php. The manipul...

📅 2026-01-09
CVSS 6.3 Dossier →
CVE-2026-0733 MEDIUM
Component: online_course_registration_system

A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impacts an unknown function of the file /onlinecourse/a...

📅 2026-01-09
CVSS 6.3 Dossier →
Component: staff_leave_management_system

A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADD_STAFF/UPDATE_STAFF of the file /staffl...

📅 2026-01-08
CVSS 2.4 Dossier →
Component: hostel_management_system

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-compla...

📅 2026-01-08
CVSS 8.7 Dossier →
CVE-2026-0547 MEDIUM
Component: online_course_registration

A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-stude...

📅 2026-01-02
CVSS 6.3 Dossier →
Component: online_course_registration

A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authoriza...

📅 2026-01-01
CVSS 6.3 Dossier →
Component: small_crm

A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation r...

📅 2025-12-31
CVSS 6.3 Dossier →
Component: billing_system

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated...

📅 2025-12-02
CVSS 6.5 Dossier →
Component: billing_system

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno par...

📅 2025-12-02
CVSS 6.5 Dossier →
Component: online_shopping_portal

Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid...

📅 2025-11-25
CVSS 4.3 Dossier →
Component: hostel_management_system

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Exe...

📅 2025-11-24
CVSS 3.5 Dossier →
Component: student_record_system

A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to ...

📅 2025-11-18
CVSS 7.5 Dossier →
Component: online_shopping_portal

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-de...

📅 2025-11-17
CVSS 6.5 Dossier →
Component: online_shopping_portal

PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php....

📅 2025-11-17
CVSS 5.4 Dossier →
CVE-2024-44659 CRITICAL
Component: online_shopping_portal

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php....

📅 2025-11-17
CVSS 9.8 Dossier →
Component: complaint_management_system

PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the fromdate and todate parameters in between-date-userrepor...

📅 2025-11-17
CVSS 4.6 Dossier →
Component: online_shopping_portal

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php....

📅 2025-11-17
CVSS 6.5 Dossier →
Component: online_shopping_portal

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page....

📅 2025-11-17
CVSS 6.5 Dossier →
Component: online_shopping_portal

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php....

📅 2025-11-17
CVSS 6.5 Dossier →
Component: complaint_management_system

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php....

📅 2025-11-17
CVSS 6.5 Dossier →
Page 2 of 45 (1,060 Total Records)