Phpgurukul Security Vulnerabilities (CVEs)

This IDOR vulnerability in PHPGurukul Hospital Management System allows authenticated users to access other patients' confidential medical records by ...

CVE-2024-55270 is an SQL injection vulnerability in phpgurukul Student Management System 1.0 that allows attackers to execute arbitrary SQL commands t...

A Cross-Site Request Forgery (CSRF) vulnerability in phpgurukul Gym Management System 1.0 allows attackers to trick authenticated users into performin...

This CVE describes a SQL injection vulnerability in PHPGurukul Hospital Management System 4.0, specifically in the /hms/admin/manage-doctors.php file ...

CVE-2026-1550 is an improper authorization vulnerability in PHPGurukul Hospital Management System 1.0 that allows attackers to bypass access controls ...

CVE-2026-1424 is an unrestricted file upload vulnerability in PHPGurukul News Portal 1.0's Profile Pic Handler component. This allows remote attackers...

CVE-2025-70899 is a Cross-Site Request Forgery vulnerability in PHPgurukul Online Course Registration v3.1 that allows attackers to perform unauthoriz...

CVE-2026-1160 is a SQL injection vulnerability in PHPGurukul Directory Management System 1.0 that allows remote attackers to execute arbitrary SQL com...

A time-based blind SQL injection vulnerability in PHPGurukul Cyber Cafe Management System v1.0 allows authenticated attackers to execute arbitrary SQL...

A stored XSS vulnerability in Cyber Cafe Management System v1.0 allows authenticated attackers to inject malicious JavaScript into username fields. Th...

A stored cross-site scripting vulnerability in Phpgurukul Cyber Cafe Management System v1.0 allows authenticated attackers to inject malicious JavaScr...

This CVE describes a SQL injection vulnerability in PHPGurukul Online Course Registration System that allows attackers to manipulate database queries ...

This stored cross-site scripting (XSS) vulnerability in phpgurukul Hostel Management System v2.1 allows attackers to inject malicious scripts into com...

This vulnerability allows remote attackers to upload arbitrary files via the photo parameter in the student registration page of PHPGurukul Online Cou...

This vulnerability in PHPGurukul Small CRM 4.0 allows unauthorized access to the edit-user.php admin function, enabling attackers to modify user accou...

CVE-2025-65380 is an SQL injection vulnerability in PHPGurukul Billing System 1.0 that allows attackers to manipulate database queries through the adm...

PHPGurukul Billing System 1.0 contains a SQL injection vulnerability in the password recovery functionality. Attackers can inject malicious SQL querie...

This vulnerability allows attackers to inject malicious scripts into the Hostel Management System's complaint registration page. Anyone using PHPGuruk...

A CSRF vulnerability in PHPGurukul Student Record System v3.2 allows attackers to trick authenticated administrators into executing unauthorized accou...

PHPGurukul Online Shopping Portal 2.0 contains a cross-site scripting vulnerability in the quantity parameter of my-cart.php. This allows attackers to...

PHPGurukul Online Shopping Portal 2.0 contains a SQL injection vulnerability in product-details.php that allows attackers to manipulate database queri...

PHPGurukul Online Shopping Portal 2.0 contains SQL injection vulnerabilities in the login.php page through the fullname, emailid, and contactno parame...

PHPGurukul Online Shopping Portal 2.0 contains a SQL injection vulnerability in the admin login page's username parameter. This allows attackers to ex...

PHPGurukul Online Shopping Portal 2.0 contains a SQL injection vulnerability in the product parameter of search-result.php. This allows attackers to e...

PHPGurukul Complaint Management System 2.0 contains a cross-site scripting (XSS) vulnerability in the fromdate and todate parameters of between-date-u...

This vulnerability allows attackers to execute arbitrary SQL commands through the email and mobileno parameters in reset-password.php. It affects PHPG...

PHPGurukul Complaint Management System 2.0 contains a cross-site scripting vulnerability in the search parameter of user-search.php. This allows attac...

PHPGurukul Complaint Management System 2.0 contains a SQL injection vulnerability in the subcategory.php file, allowing attackers to manipulate databa...

PHPGurukul Complaint Management System 2.0 contains a SQL injection vulnerability in the between-date-userreport.php file. Attackers can exploit the f...

PHPGurukul Small CRM 3.0 contains a stored cross-site scripting vulnerability in the ticket management system. Attackers can inject malicious scripts ...

PHPGurukul Small CRM 3.0 contains SQL injection vulnerabilities in the quote-details.php file via id and adminremark parameters. This allows attackers...

PHPGurukul Small CRM 3.0 contains a SQL injection vulnerability in the change-password.php file via the oldpass parameter. This allows attackers to ex...

PHPGurukul Small CRM 3.0 contains a SQL injection vulnerability in the manage-tickets.php file through the frm_id and aremark parameters. This allows ...

This SQL injection vulnerability in PHPGurukul Tourism Management System 1.0 allows attackers to manipulate database queries through the uid parameter...

This SQL injection vulnerability in PHPGurukul Student Record System 3.20 allows attackers to manipulate database queries through the adminname and ae...

PHPGurukul Student Record System 3.20 contains SQL injection vulnerabilities in the add-subject.php file through multiple parameters (sub1, sub2, sub3...

CVE-2024-44640 is an SQL injection vulnerability in PHPGurukul Student Record System that allows attackers to manipulate database queries through cour...

This SQL injection vulnerability in PHPGurukul Student Record Management System allows attackers to manipulate database queries through the login page...

This CVE describes SQL injection vulnerabilities in multiple parameters of the register.php file in PHPGurukul Student Record System 3.20. Attackers c...

PHPGurukul Student Record System 3.20 contains SQL injection vulnerabilities in the password recovery functionality. Attackers can manipulate the id a...

This vulnerability allows attackers to execute arbitrary SQL commands via the currentpassword parameter in change-password.php. It affects PHPGurukul ...

This vulnerability allows attackers to inject malicious scripts into the PHPGurukul Student Record System admin profile page. When exploited, it can l...

CVE-2025-50363 is a stored cross-site scripting (XSS) vulnerability in Phpgurukul Maid Hiring Management System 1.0 that allows attackers to inject ma...

PHPGurukul News Portal 1.0 contains a hard-coded cryptographic key in its settings.py file, allowing attackers to potentially decrypt sensitive data o...

This vulnerability in PHPGurukul News Portal 1.0 allows remote attackers to extract sensitive information through debug mode exposure. The attack inse...

Bank Locker Management System by PHPGurukul contains a reflected Cross-Site Scripting vulnerability in the /search parameter that allows attackers to ...

This SQL injection vulnerability in PHPGurukul Beauty Parlour Management System 1.1 allows remote attackers to execute arbitrary SQL commands through ...

This vulnerability allows remote attackers to execute SQL injection attacks via the 'delid' parameter in the /admin/new-appointment.php file of PHPGur...