Read the docs

PHPGurukul

Records1122All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical133CVSS 9.0–10.0
CVSS high107CVSS 7.0–8.9

Exploited now

PHPGurukul records in CISA KEV

No PHPGurukul vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

25 records in Land Record System · all components

Priority HIGH 82

An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02643 Published 2025-01-10 No fix listed CWE-78
Priority HIGH 82

A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "pagetitle" parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2025-01-10 No fix listed CWE-79
Priority HIGH 70

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00503 Published 2024-12-31 No fix listed CWE-74
Priority HIGH 67

A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the " todate" POST request parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00758 Published 2025-02-13 No fix listed CWE-89
Priority HIGH 67

A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the fromdate POST request parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00758 Published 2025-02-13 No fix listed CWE-89
Priority MEDIUM 60

A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record System Project in PHP v1.0 allows remote attackers to execute arbitrary code via the propertytype POST request parameter.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00348 Published 2025-02-26 No fix listed CWE-89
Priority MEDIUM 57

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.005 Published 2025-05-01 No fix listed CWE-74
Priority MEDIUM 57

A vulnerability has been found in PHPGurukul Land Record System 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00498 Published 2024-12-31 No fix listed CWE-74
Open these records in search →