Browse CVEs

MEDIUM 6.1 CVE-2024-51226 A stored cross-site scripting (XSS) vulnerability in the component /admin/search-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allo… Vehicle Record Management System No fix yet Fix from $1,6002026-03-23 HIGH 8.8 CVE-2025-70064 PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability. A low-privileged user (Patient) can directly access the Adm… Hospital Management System No fix yet Fix from $1,9502026-02-18 MEDIUM 6.5 CVE-2025-70062 PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the 'Add Doctor' module. The application fai… Hospital Management System No fix yet Fix from $1,6002026-02-18 MEDIUM 6.5 CVE-2025-70063 The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference (IDOR) vulnerability. The app… Hospital Management System No fix yet Fix from $1,6002026-02-18 HIGH 8.8 CVE-2024-55270 phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata parameter. Student Management System No fix yet Fix from $1,9502026-02-17 HIGH 7.2 CVE-2026-2179 A vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-users.php. Th… Hospital Management System No fix yet Fix from $1,9502026-02-08 HIGH 7.2 CVE-2026-2134 A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affected element is an unknown function of the file /hms… Hospital Management System No fix yet Fix from $1,9502026-02-08 CRITICAL 9.8 CVE-2026-2088 A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointme… Beauty Parlour Management System Mitigation only Fix from $2,3002026-02-07 HIGH 8.8 CVE-2026-1550 A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /h… Hospital Management System No fix yet Fix from $1,9502026-01-28 HIGH 7.2 CVE-2026-1424 A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic Handler. The manipulation lea… News Portal No fix yet Fix from $1,9502026-01-26 MEDIUM 6.5 CVE-2025-70899 PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on all administrative forms. An attacker can perform un… Online Course Registration No fix yet Fix from $1,6002026-01-22 CRITICAL 9.8 CVE-2026-1160 A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown function of the file /index.php of t… Directory Management System Mitigation only Fix from $2,3002026-01-19 HIGH 8.8 CVE-2026-1141 A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /admin/add-subadmins.php of the… News Portal No fix yet Fix from $1,9502026-01-19 MEDIUM 6.5 CVE-2026-1142 A security flaw has been discovered in PHPGurukul News Portal 1.0. The impacted element is an unknown function. Performing a manipulation results in … News Portal No fix yet Fix from $1,6002026-01-19 CRITICAL 9.8 CVE-2025-70892 Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly … Cyber Cafe Management System Mitigation only Fix from $2,3002026-01-15 HIGH 8.8 CVE-2025-70893 A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 within the adminprofile.php endpoint. The appli… Cyber Cafe Management System No fix yet Fix from $1,9502026-01-15 MEDIUM 6.1 CVE-2025-70890 A stored cross-site scripting (XSS) vulnerability exists in Cyber Cafe Management System v1.0. An authenticated attacker can inject arbitrary JavaScr… Cyber Cafe Management System No fix yet Fix from $1,6002026-01-15 MEDIUM 6.1 CVE-2025-70891 A stored cross-site scripting (XSS) vulnerability exists in Phpgurukul Cyber Cafe Management System v1.0 within the user management module. The appli… Cyber Cafe Management System No fix yet Fix from $1,6002026-01-15 CRITICAL 9.8 CVE-2025-69991 phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php. News Portal No fix yet Fix from $2,3002026-01-13 CRITICAL 9.8 CVE-2025-69992 phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server witho… News Portal Mitigation only Fix from $2,3002026-01-13 CRITICAL 9.1 CVE-2025-69990 phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php. The parameter file can cause any file to be dele… News Portal No fix yet Fix from $2,3002026-01-13 HIGH 8.8 CVE-2026-0803 A vulnerability was found in PHPGurukul Online Course Registration System up to 3.1. This affects an unknown part of the file /enroll.php. The manipu… Online Course Registration System after 3.1 Fix from $1,9502026-01-09 HIGH 8.8 CVE-2026-0733 A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impacts an unknown function of the file /onlinecourse/… Online Course Registration System after 3.1 Fix from $1,9502026-01-09 HIGH 8.7 CVE-2025-63611 Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-compl… Hostel Management System No fix yet Fix from $1,9502026-01-08 HIGH 8.8 CVE-2026-0547 A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-stud… Online Course Registration after 3.1 Fix from $1,9502026-01-02 HIGH 8.8 CVE-2025-15406 A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authoriz… Online Course Registration after 3.1 Fix from $1,9502026-01-01 HIGH 8.8 CVE-2025-15390 A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation … Small Crm after 4.0 Fix from $1,9502025-12-31 MEDIUM 6.5 CVE-2025-65380 PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidate… Billing System Mitigation only Fix from $1,6002025-12-02 MEDIUM 6.5 CVE-2025-65379 PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno pa… Billing System Mitigation only Fix from $1,6002025-12-02 MEDIUM 5.4 CVE-2025-13577 A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Ex… Hostel Management System Mitigation only Fix from $1,6002025-11-24