Phpgurukul Online Library Management System vulnerabilities
6 vulnerabilities
Known vulnerabilities in Phpgurukul Online Library Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-2093phpgurukulonline_library_management_system
EPSS score0.36%
A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number leads to weak password recovery. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.CVE-2025-7601phpgurukulonline_library_management_systemEPSS score0.29%
A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/student-history.php. The manipulation of the argument stdid leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2025-7600phpgurukulonline_library_management_systemEPSS score0.38%
A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0. This affects an unknown part of the file /admin/student-history.php. The manipulation of the argument stdid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.CVE-2025-57118phpgurukulonline_library_management_systemEPSS score0.56%
An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileges via the index.phpCVE-2025-57119phpgurukulonline_library_management_systemEPSS score0.56%
An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login functionCVE-2025-50488phpgurukulonline_library_management_systemEPSS score0.34%
Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack.