Skip to content
Noroxi

PHPGurukul records

1,062 published records for vendor phpgurukul.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
55
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

1,062 records
  • CVE-2023-0562
    52Plan

    PHPGurukul Bank Locker Management System Login index.php sql injection

    CriticalCVSS 9.8Proof of conceptEPSS 44%

    phpgurukul · bank locker management systemJan 28, 2023

  • CVE-2022-29009
    46Plan

    Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    phpgurukul · cyber cafe management systemMay 11, 2022

  • CVE-2022-29006
    45Plan

    Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allow

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    phpgurukul · directory management systemMay 11, 2022

  • CVE-2022-29007
    45Plan

    Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    phpgurukul · dairy farm shop management systemMay 11, 2022

  • CVE-2020-5307
    44Plan

    PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    phpgurukul · dairy farm shop management systemJan 7, 2020

  • CVE-2020-5192
    42Plan

    PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not

    HighCVSS 8.8Proof of conceptEPSS 23%

    phpgurukul · hospital management systemJan 5, 2020

  • CVE-2022-24263
    41Plan

    Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via t

    CriticalCVSS 9.8Proof of conceptEPSS 8%

    phpgurukul · hospital management systemJan 31, 2022

  • CVE-2020-10224
    41Plan

    An unauthenticated file upload vulnerability has been identified in admin_add.php in PHPGurukul Online Book Store 1.0.

    CriticalCVSS 9.8No exploitEPSS 5%

    phpgurukul · online book storeMar 8, 2020

  • CVE-2021-26822
    40Plan

    Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php.

    CriticalCVSS 9.8No exploitEPSS 4%

    phpgurukul · teachers record management systemFeb 15, 2021

  • CVE-2023-23163
    40Plan

    Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    phpgurukul · art gallery management systemFeb 10, 2023

  • CVE-2023-23162
    40Plan

    Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php.

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    phpgurukul · art gallery management systemFeb 10, 2023

  • CVE-2020-10225
    40Plan

    An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0.

    CriticalCVSS 9.8No exploitEPSS 4%

    phpgurukul · job portalMar 8, 2020

  • CVE-2020-25952
    40Plan

    SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers

    CriticalCVSS 9.8No exploitEPSS 4%

    phpgurukul · user registration \& login and user management systemNov 16, 2020

  • CVE-2023-23156
    40Plan

    Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    phpgurukul · art gallery management systemFeb 27, 2023

  • CVE-2023-33338
    40Plan

    Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    phpgurukul · old age home management systemMay 23, 2023

  • CVE-2022-27351
    40Plan

    Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy.

    CriticalCVSS 9.8No exploitEPSS 3%

    phpgurukul · zoo management systemApr 8, 2022

  • CVE-2021-26765
    40Plan

    SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid

    CriticalCVSS 9.8No exploitEPSS 2%

    phpgurukul · student record systemJul 22, 2021

  • CVE-2020-35427
    40Plan

    SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands an

    CriticalCVSS 9.8No exploitEPSS 2%

    phpgurukul · employee record management systemJul 20, 2021

  • CVE-2024-57687
    40Plan

    An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows re

    CriticalCVSS 9.8No exploitEPSS 2%

    phpgurukul · land record systemJan 10, 2025

  • CVE-2020-12429
    40Plan

    Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass i

    CriticalCVSS 9.8No exploitEPSS 2%

    phpgurukul · online course registrationApr 28, 2020

  • CVE-2020-36062
    40Plan

    Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to t

    CriticalCVSS 9.8No exploitEPSS 2%

    phpgurukul · dairy farm shop management systemFeb 11, 2022

  • CVE-2021-33470
    40Plan

    COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel.

    CriticalCVSS 9.8No exploitEPSS 2%

    phpgurukul · covid19 testing management systemMay 26, 2021

  • CVE-2021-42224
    40Plan

    SQL Injection vulnerability exists in IFSC Code Finder Project 1.0 via the searchifsccode POST parameter in /search.php.

    CriticalCVSS 9.8No exploitEPSS 2%

    phpgurukul · ifsc code finderOct 13, 2021

  • CVE-2021-43451
    40Plan

    SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php.

    CriticalCVSS 9.8No exploitEPSS 2%

    phpgurukul · employee record management systemDec 1, 2021

  • CVE-2021-44966
    40Plan

    SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php.

    CriticalCVSS 9.8No exploitEPSS 2%

    phpgurukul · employee record management systemDec 13, 2021