phpgurukul Vulnerability Advisory Catalog

Total 1,060 security vulnerabilities recorded for phpgurukul software and firmware.

← Back to All Vendors
Component: beauty_parlour_management_system

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/readenq.php. ...

📅 2025-09-14
CVSS 7.3 Dossier →
Component: online_shopping_portal

PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the quantity parameter when add...

📅 2025-09-12
CVSS 6.1 Dossier →
Component: online_fire_reporting_system

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper...

📅 2025-09-11
CVSS 5.4 Dossier →
Component: online_fire_reporting_system

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper...

📅 2025-09-11
CVSS 5.4 Dossier →
Component: online_fire_reporting_system

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper...

📅 2025-09-11
CVSS 5.4 Dossier →
Component: online_fire_reporting_system

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the l...

📅 2025-09-11
CVSS 5.4 Dossier →
CVE-2025-40692 CRITICAL
Component: online_fire_reporting_system

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete databas...

📅 2025-09-11
CVSS 9.8 Dossier →
CVE-2025-40691 CRITICAL
Component: online_fire_reporting_system

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete databas...

📅 2025-09-11
CVSS 9.8 Dossier →
CVE-2025-40690 CRITICAL
Component: online_fire_reporting_system

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete databas...

📅 2025-09-11
CVSS 9.8 Dossier →
CVE-2025-40689 CRITICAL
Component: online_fire_reporting_system

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete databas...

📅 2025-09-11
CVSS 9.8 Dossier →
CVE-2025-40687 CRITICAL
Component: online_fire_reporting_system

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete databas...

📅 2025-09-11
CVSS 9.8 Dossier →
Component: small_crm

A vulnerability was found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation...

📅 2025-09-09
CVSS 7.3 Dossier →
Component: user_management_system

A security flaw has been discovered in PHPGurukul User Management System 1.0. Affected is an unknown function of the file /admin/edit-user-profile.php...

📅 2025-09-08
CVSS 6.3 Dossier →
Component: small_crm

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing ma...

📅 2025-09-08
CVSS 7.3 Dossier →
Component: online_course_registration

A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The mani...

📅 2025-09-05
CVSS 7.3 Dossier →
Component: online_shopping_portal

PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php....

📅 2025-09-04
CVSS 5.4 Dossier →
Component: beauty_parlour_management_system

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /a...

📅 2025-09-04
CVSS 7.3 Dossier →
Component: beauty_parlour_management_system

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admi...

📅 2025-09-04
CVSS 7.3 Dossier →
Component: doctor_appointment_management_system

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. Thi...

📅 2025-09-03
CVSS 7.6 Dossier →
Component: complaint_management_system

phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the fullname parameter....

📅 2025-09-03
CVSS 8.8 Dossier →
Component: complaint_management_system

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/subcategory.php via the categoryName parameter....

📅 2025-09-03
CVSS 7.2 Dossier →
Component: complaint_management_system

phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter....

📅 2025-09-03
CVSS 6.5 Dossier →
CVE-2025-57148 CRITICAL
Component: online_shopping_portal

phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation....

📅 2025-09-03
CVSS 9.1 Dossier →
Component: complaint_management_system

A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack of input validation of multipl...

📅 2025-09-03
CVSS 7.5 Dossier →
Page 5 of 45 (1,060 Total Records)