Mayuri K vulnerabilities

9 vulnerabilities

Known vulnerabilities in Mayuri K products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.

Products

3
9.8CVE-2025-1874mayuri k101news+1
EPSS score
0.42%
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php.
9.8CVE-2025-1872mayuri k101news+1
EPSS score
0.42%
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php.
9.8CVE-2025-1869mayuri k101news+1
EPSS score
0.42%
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/check_avalability.php.
9.8CVE-2025-1873mayuri k101news+1
EPSS score
0.42%
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php.
9.8CVE-2025-1167mayuri kemployee management system+1
EPSS score
0.52%
A vulnerability was found in Mayuri K Employee Management System up to 192.168.70.3 and classified as critical. Affected by this issue is some unknown functionality of the file /hr_soft/admin/Update_User.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
9.8CVE-2025-1870mayuri k101news+1
EPSS score
0.42%
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagedescription" parameter in admin/aboutus.php.
9.8CVE-2025-1871mayuri k101news+1
EPSS score
0.42%
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php.
9.8CVE-2025-1875mayuri k101news+1
EPSS score
0.42%
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "searchtitle" parameter in search.php.
6.9CVE-2026-5330mayuri_kbest courier management system+1
EPSS score
0.52%
A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_user of the component User Delete Handler. Performing a manipulation of the argument ID results in improper access controls. The attack may be initiated remotely. The exploit has been made public and could be used.