phpgurukul has 46 CVEs on record between 2020 and 2026. Disclosure cadence is accelerating: 13 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 12. The median CVSS is 6.3 (medium), with 6 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-89 (22) and CWE-79 (15). Most affected products: beauty_parlour_management_system (7), Bank Locker Management System (3), Blood Donor Management System (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 13 prev 0
Products
- beauty_parlour_management_system 7
- Bank Locker Management System 3
- Blood Donor Management System 3
- Daily Expense Tracker System 3
- curfew_e-pass_management_system 3
- directory_management_system 3
Worst active — by depth score
CVE-2024-44659Critical· 9.8PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.54CVE-2025-40690Critical· 9.8SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul54CVE-2022-35156Critical· 9.8Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php..54CVE-2022-31384Critical· 9.8Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php.54CVE-2022-31383Critical· 9.8Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php.54
phpgurukul vulnerabilities
CVEs affecting phpgurukul, newest first. Open any entry for full detail, references, and exploit status.
46 CVEsRSS
CVE-2026-105703Medium· 4.7PoCA vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler…
CVE-2026-90851Medium· 6.3PoCA flaw has been found in PHPGurukul Hostel Management System 3.0
A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the a…
CVE-2026-90850Low· 2.4PoCA vulnerability was detected in PHPGurukul Hostel Management System 3.0
A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be lau…
CVE-2026-90846High· 7.3PoCA vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1
A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is …
CVE-2026-90845Low· 3.5PoCA flaw has been found in PHPGurukul Daily Expense Tracker System 1.1
A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. …
CVE-2026-90844High· 7.3PoCA vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1
A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performing a manipulation of the argument email results in sql injec…
CVE-2026-90842Low· 3.7PoCA weakness has been identified in PHPGurukul Blood Donor Management System 1.0
A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Login_Model.php. This manipulation of the argument password/email/c…
CVE-2026-90841High· 7.3PoCA security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0
A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The m…
CVE-2026-90840High· 7.3PoCA vulnerability was identified in PHPGurukul Blood Donor Management System 1.0
A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to i…
CVE-2026-90519Medium· 6.3PoCA weakness has been identified in PHPGurukul Bank Locker Management System 1.0
A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. This manipulation of the argument addressproof causes unrestricted upload. Remo…
CVE-2026-90517Medium· 5.3PoCA vulnerability was identified in PHPGurukul Bank Locker Management System 1.0
A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The manipulation of the argument ltid leads to authorization bypass. The attack ma…
CVE-2026-90575Low· 3.7PoCA weakness has been identified in PHPGurukul Small CRM 4.0
A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unserialize of the file /crm/login.php of the component Login Success Handler. This manipulation of the argument geopluginURL causes deserialization. I…
CVE-2026-90518Medium· 6.3PoCA security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0
A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. The attack may …
CVE-2025-15406Medium· 6.3A flaw has been found in PHPGurukul Online Course Registration up to 3.1
A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is possible. The exploit has been published and…
CVE-2025-13577Low· 3.5A flaw has been found in PHPGurukul Hostel Management System 2.1
A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is …
CVE-2024-44659Critical· 9.8PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.
CVE-2025-13247High· 7.3A security flaw has been discovered in PHPGurukul Tourism Management System 1.0
A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection. It is possi…
CVE-2025-12312Low· 2.4A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0
A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be…
CVE-2025-12311Low· 2.4A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0
A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0. This issue affects some unknown processing of the file edit-category-detail.php. The manipulation of the argument catname results in cross site scripting. Th…
CVE-2025-12303Low· 2.4A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0
A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing a manipulation of the argument adminname/email can lead to cross site scripting…
CVE-2025-11507High· 7.3A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1
A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/search-invoices.php. This manipulation of the argument searchdata causes sql injection. The…
CVE-2025-11506High· 7.3A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1
A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql inj…
CVE-2025-11505High· 7.3A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1
A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/new-appointment.php. The manipulation of the argument delid leads to sql injection. It is possible to i…
CVE-2025-11503High· 7.3A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1
A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-services.php. Executing a manipulation of the argument delid can lead to sql injectio…
CVE-2025-11390Medium· 4.3A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0
A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search.php of the component POST Parameter Handler. Executing a manipulation of the ar…
CVE-2025-11416High· 7.3A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1
A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/invoices.php. Performing a manipulation of the argument delid results in sql injection. The attack ca…
CVE-2025-11415High· 7.3A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1
A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/customer-list.php. Such manipulation of the argument delid leads to sql injection.…
CVE-2025-11330Medium· 6.3A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1
A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports-detail.php. Such manipulation of the argument fromdate/todate leads to sql in…
CVE-2025-11112Medium· 4.3A security vulnerability has been detected in PHPGurukul Employee Record Management System 1.3
A security vulnerability has been detected in PHPGurukul Employee Record Management System 1.3. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument First name leads to cross site scripting. The …
CVE-2025-11053High· 7.3A weakness has been identified in PHPGurukul Small CRM 4.0
A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead to sql injection. The attack can be launched remotely. T…