PHPGurukul

Records1122All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical133CVSS 9.0–10.0

CVSS high107CVSS 7.0–8.9

Exploited now

PHPGurukul records in CISA KEV

No PHPGurukul vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hospital Management System 62 records HIGH Zoo Management System 37 records HIGH Art Gallery Management System 36 records HIGH Online Shopping Portal 33 records HIGH Online Fire Reporting System 32 records HIGH Complaint Management System 31 records HIGH Student Record System 29 records HIGH Beauty Parlour Management System 28 records HIGH

Records

62 records in Hospital Management System · all components

TI-2024-34337 CVE-2024-51360 · GHSA-m537-88r7-p568

An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute…

HIGH 82

An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the hms/doctor/edit-profile.php file

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00992 Published 2025-05-23 No fix listed CWE-94

TI-2023-15100 CVE-2023-31498 · GHSA-gvqg-qrvh-38g6

A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0…

HIGH 82

A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary code and access sensitive information via the session token parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02131 Published 2023-05-11 No fix listed CWE-384

TI-2020-16228 CVE-2020-26629 · GHSA-qh26-cpr6-mhm2

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital…

HIGH 82

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2024-01-10 No fix listed CWE-434

TI-2024-00330 CVE-2024-0363 · GHSA-237h-73gr-5r5j

PHPGurukul Hospital Management System patient-search.php sql injection

HIGH 76

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00649 Published 2024-01-10 No fix listed CWE-89

TI-2024-00329 CVE-2024-0362 · GHSA-5j92-pprm-hjxm

PHPGurukul Hospital Management System change-password.php sql injection

HIGH 75

A vulnerability classified as critical was found in PHPGurukul Hospital Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00649 Published 2024-01-10 No fix listed CWE-89

TI-2024-00327 CVE-2024-0360 · GHSA-q42m-4fh8-pvqq

PHPGurukul Hospital Management System edit-doctor-specialization.php sql injection

HIGH 75

A vulnerability was found in PHPGurukul Hospital Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00697 Published 2024-01-10 No fix listed CWE-89

TI-2025-43014 CVE-2025-70064 · GHSA-wjf9-j9vw-27f4

PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability.

HIGH 73

PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00541 Published 2026-02-18 No fix listed CWE-284

TI-2021-14187 CVE-2021-35387 · GHSA-3rxj-99fp-83j6

Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php.

HIGH 73

Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00942 Published 2022-10-28 No fix listed CWE-89

TI-2025-35273 CVE-2025-56216 · GHSA-7xr7-rggp-w8mq

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter.

HIGH 70

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00286 Published 2025-08-25 No fix listed CWE-89

TI-2025-06941 CVE-2025-7604 · GHSA-5jxm-crh2-g4cj

PHPGurukul Hospital Management System user-login.php sql injection

HIGH 70

A vulnerability was found in PHPGurukul Hospital Management System 4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00469 Published 2025-07-14 No fix listed CWE-74

TI-2025-06538 CVE-2025-7176 · GHSA-c63j-hm8q-jpfj

PHPGurukul Hospital Management System view-medhistory.php sql injection

HIGH 70

A vulnerability was found in PHPGurukul Hospital Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00691 Published 2025-07-08 No fix listed CWE-74

TI-2025-43013 CVE-2025-70063 · GHSA-8gfj-223w-87pr

The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an…

MEDIUM 62

The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference (IDOR) vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00382 Published 2026-02-18 No fix listed CWE-639

TI-2025-43012 CVE-2025-70062 · GHSA-2hcf-jfqx-g286

PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF)…

MEDIUM 62

PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the 'Add Doctor' module.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00202 Published 2026-02-18 No fix listed CWE-352

TI-2024-30904 CVE-2024-46239 · GHSA-88vp-fx5v-pxw6

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management…

MEDIUM 60

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00301 Published 2024-10-21 No fix listed CWE-79

TI-2024-30903 CVE-2024-46238 · GHSA-23wv-w3v2-hcrj

Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital…

MEDIUM 60

Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00301 Published 2024-10-21 No fix listed CWE-79

TI-2024-00261 CVE-2024-0286 · GHSA-qh38-36vj-xxx2

PHPGurukul Hospital Management System Contact Form index.php#contact_us cross site scripting

MEDIUM 60

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00877 Published 2024-01-07 No fix listed CWE-79

TI-2024-30902 CVE-2024-46237 · GHSA-7pfh-f4vj-ww8f

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via…

MEDIUM 58

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00317 Published 2024-10-09 No fix listed CWE-79

TI-2022-20452 CVE-2022-42206 · GHSA-mm29-jc8v-gx7f

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting…

MEDIUM 58

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00557 Published 2022-10-21 No fix listed CWE-79

TI-2022-20451 CVE-2022-42205 · GHSA-qfwf-5hgc-r5j2

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php.

MEDIUM 58

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00557 Published 2022-10-21 No fix listed CWE-79

TI-2021-14188 CVE-2021-35388 · GHSA-v736-h5g7-qvj3

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php.

MEDIUM 58

Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2022-10-28 No fix listed CWE-79

TI-2020-04251 CVE-2020-5192 · GHSA-986j-7f6m-vx4w

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection…

MEDIUM 58

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user input, and allow for the application's database and information…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.2353 Published 2020-01-06 No fix listed CWE-89

TI-2024-10821 CVE-2024-11675 · GHSA-rwvw-fh44-w2r2

CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting

MEDIUM 57

A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00515 Published 2024-11-26 No fix listed CWE-79

TI-2026-01828 CVE-2026-2179 · GHSA-h7p7-f8wc-8xvh

PHPGurukul Hospital Management System manage-users.php sql injection

MEDIUM 56

A vulnerability was determined in PHPGurukul Hospital Management System 4.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00366 Published 2026-02-08 No fix listed CWE-74

TI-2026-01784 CVE-2026-2134 · GHSA-hgh5-fxqq-8cf2

PHPGurukul Hospital Management System manage-doctors.php sql injection

MEDIUM 56

A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00364 Published 2026-02-08 No fix listed CWE-74

TI-2020-16226 CVE-2020-26627 · GHSA-h2q9-rjqh-c64g

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System…

MEDIUM 56

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under th…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00707 Published 2024-01-10 No fix listed CWE-89

Open these records in search →