Phpgurukul User Registration \& Login And User Management System vulnerabilities, page 2
26 vulnerabilities
Known vulnerabilities in Phpgurukul User Registration \& Login And User Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-48280phpgurukuluser_registration_\&_login_and_user_management_system
EPSS score0.46%
A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parameter in a POST HTTP request.CVE-2024-25202phpgurukuluser_registration_\&_login_and_user_management_systemEPSS score0.99%
Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and User Management System 1.0 allows attackers to run arbitrary code via the search bar.CVE-2024-28323phpgurukuluser_registration_\&_login_and_user_management_systemEPSS score0.41%
The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection attacks.CVE-2024-50843phpgurukuluser_registration_\&_login_and_user_management_systemEPSS score0.60%
A Directory listing issue was found in PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers attacker to access sensitive files and directories via /loginsystem/assets.CVE-2026-105703phpgurukuluser_registration_\&_login_and_user_management_systemEPSS score0.23%
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.CVE-2026-5543phpgurukuluser_registration_\&_login_and_user_management_systemEPSS score0.32%
A vulnerability was identified in PHPGurukul User Registration & Login and User Management System 3.3. The affected element is an unknown function of the file /admin/yesterday-reg-users.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.