Priority HIGH 73
phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the fullname parameter.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0061 · Published 2025-09-03 · No fix listed CWE-79
Priority HIGH 72
A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0048 · Published 2025-09-03 · No fix listed CWE-89
Priority HIGH 70
phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00436 · Published 2025-09-03 · No fix listed CWE-89
Priority HIGH 70
A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00532 · Published 2025-05-16 · No fix listed CWE-74
Priority HIGH 70
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00258 · Published 2025-11-17 · No fix listed CWE-89
Priority HIGH 70
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00258 · Published 2025-11-17 · No fix listed CWE-89
Priority HIGH 70
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00258 · Published 2025-11-17 · No fix listed CWE-89
Priority HIGH 70
A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00698 · Published 2024-12-05 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00698 · Published 2024-12-05 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00698 · Published 2024-12-05 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Complaint Management system 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00745 · Published 2024-11-28 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Complaint Management system 1.0 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0087 · Published 2024-11-28 · No fix listed CWE-74
Priority HIGH 70
A vulnerability has been found in PHPGurukul Complaint Management system 1.0 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0087 · Published 2024-11-28 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management system 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0087 · Published 2024-11-28 · No fix listed CWE-74
Priority HIGH 67
phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/subcategory.php via the categoryName parameter.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00621 · Published 2025-09-03 · No fix listed CWE-79
Priority MEDIUM 62
phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00438 · Published 2025-09-03 · No fix listed CWE-89
Priority MEDIUM 60
PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the search parameter in user-search.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00241 · Published 2025-11-17 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability, which was classified as problematic, was found in PHPGurukul Complaint Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00257 · Published 2025-07-19 · No fix listed CWE-352
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00499 · Published 2025-06-05 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability classified as critical was found in PHPGurukul Complaint Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00499 · Published 2025-06-05 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00439 · Published 2025-06-05 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Complaint Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00439 · Published 2025-06-05 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Complaint Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00439 · Published 2025-06-05 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Complaint Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00439 · Published 2025-06-05 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00439 · Published 2025-06-05 · No fix listed CWE-74
Load more
THREATIST.IORead the docs