CveMateVulnerability intelligence

Phpgurukul vulnerabilities

1,122 vulnerabilities

Known vulnerabilities in Phpgurukul products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 101 products.

Products

50 of 101

Hospital Management System69 vulnerabilities
Zoo Management System37 vulnerabilities
Art Gallery Management System36 vulnerabilities
Online Shopping Portal33 vulnerabilities
Complaint Management System32 vulnerabilities
Online Fire Reporting System32 vulnerabilities
Student Record System29 vulnerabilities
Beauty Parlour Management System28 vulnerabilities
User Registration \& Login And User Management System26 vulnerabilities
Land Record System25 vulnerabilities
Pre School Enrollment System25 vulnerabilities
Dairy Farm Shop Management System24 vulnerabilities
Vehicle Parking Management System24 vulnerabilities
Apartment Visitors Management System21 vulnerabilities
Bank Locker Management System21 vulnerabilities
Nipah Virus Testing Management System21 vulnerabilities
Old Age Home Management System21 vulnerabilities
Cyber Cafe Management System20 vulnerabilities
Park Ticketing Management System20 vulnerabilities
Small Crm20 vulnerabilities
Covid19 Testing Management System19 vulnerabilities
Employee Record Management System19 vulnerabilities
Boat Booking System18 vulnerabilities
Directory Management System17 vulnerabilities
Emergency Ambulance Hiring Portal17 vulnerabilities
Hostel Management System17 vulnerabilities
Men Salon Management System17 vulnerabilities
Online Nurse Hiring System17 vulnerabilities
Restaurant Table Booking System17 vulnerabilities
News Portal16 vulnerabilities
Online Course Registration16 vulnerabilities
Daily Expense Tracker System15 vulnerabilities
E Diary Management System15 vulnerabilities
Maid Hiring Management System15 vulnerabilities
Online Shopping Portal Project15 vulnerabilities
Rail Pass Management System15 vulnerabilities
Human Metapneumovirus Testing Management System14 vulnerabilities
Medical Card Generation System13 vulnerabilities
Doctor Appointment Management System12 vulnerabilities
Job Portal12 vulnerabilities
News Portal Project12 vulnerabilities
Online Birth Certificate System12 vulnerabilities
Auto\/Taxi Stand Management System11 vulnerabilities
Company Visitor Management System11 vulnerabilities
Curfew E Pass Management System10 vulnerabilities
Teacher Subject Allocation Management System10 vulnerabilities
Teachers Record Management System10 vulnerabilities
Online Banquet Booking System9 vulnerabilities
Online Dj Booking Management System9 vulnerabilities
Bp Monitoring Management System8 vulnerabilities

CVE-2021-26304phpgurukuldaily_expense_tracker_system5y ago29-01-2021 01:48

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter.CVE-2021-26764phpgurukulstudent_record_system5y ago22-07-2021 15:56

SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php.CVE-2021-26762phpgurukulstudent_record_system5y ago22-07-2021 15:43

SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php.CVE-2021-26809phpgurukulcar_rental_portal5y ago17-02-2021 14:32

PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php.CVE-2021-26765phpgurukulstudent_record_system5y ago22-07-2021 15:33

SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php.CVE-2021-26303phpgurukuldaily_expense_tracker_system5y ago29-01-2021 01:48

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field.CVE-2021-26822phpgurukulteachers_record_management_system5y ago15-02-2021 20:54

Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unauthenticated attacker to leak sensitive information and perform code execution attacks.CVE-2021-42223phpgurukulonline_dj_booking_management_system5y ago13-10-2021 17:42

Cross Site Scripting (XSS).vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php.CVE-2021-42224phpgurukulifsc_code_finder5y ago13-10-2021 17:47

SQL Injection vulnerability exists in IFSC Code Finder Project 1.0 via the searchifsccode POST parameter in /search.php.CVE-2021-4232phpgurukulzoo_management_system+14y ago26-05-2022 17:05

A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticket.php. The manipulation with the input <script>alert(1)</script> leads to cross site scripting. It is possible to launch the attack remotely.CVE-2021-39411phpgurukulhospital_management_system4y ago05-11-2021 14:32

Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the (1) searchdata parameter in (a) doctor/search.php and (b) admin/patient-search.php, and the (2) fromdate and (3) todate parameters in admin/betweendates-detailsreports.php.CVE-2021-37782phpgurukulemployee_record_management_system3y ago28-10-2022 00:00

Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php.CVE-2021-37781phpgurukulemployee_record_management_system3y ago28-10-2022 00:00

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php.CVE-2021-37806phpgurukulvehicle_parking_management_system4y ago27-10-2021 16:01

An SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System affected version 1.0. The system is vulnerable to time-based SQL injection on multiple endpoints. Based on the SLEEP(N) function payload that will sleep for a number of seconds used on the (1) editid , (2) viewid, and (3) catename parameters, the server response is about (N) seconds delay respectively which mean it is vulnerable to MySQL Blind (Time Based). An attacker can use sqlmap to further the exploitation for extracting sensitive information from the database.CVE-2021-37808phpgurukulnews_portal4y ago27-10-2021 16:21

SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the (1) category, (2) subcategory, (3) sucatdescription, and (4) username parameters, the server response is about (N) seconds delay respectively which mean it is vulnerable to MySQL Blind (Time Based). An attacker can use sqlmap to further the exploitation for extracting sensitive information from the database.CVE-2021-37805phpgurukulvehicle_parking_management_system4y ago27-10-2021 15:52

A Stored Cross Site Scripting (XSS) vunerability exists in Sourcecodeste Vehicle Parking Management System affected version 1.0 is via the add-vehicle.php endpoint.CVE-2021-37807phpgurukulonline_shopping_portal4y ago27-10-2021 16:06

An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /check_availability.php endpoint that serves as a checker whether a new user's email is already exist within the database.CVE-2021-43137phpgurukulhostel_management_system4y ago01-12-2021 19:14

Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover.CVE-2021-43451phpgurukulemployee_record_management_system4y ago01-12-2021 18:14

SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php.CVE-2021-27544phpgurukulbeauty_parlour_management_system5y ago15-04-2021 11:53

Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "sername" parameter.