PHPGurukul

Records1122All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical133CVSS 9.0–10.0

CVSS high107CVSS 7.0–8.9

Exploited now

PHPGurukul records in CISA KEV

No PHPGurukul vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hospital Management System 62 records HIGH Zoo Management System 37 records HIGH Art Gallery Management System 36 records HIGH Online Shopping Portal 33 records HIGH Online Fire Reporting System 32 records HIGH Complaint Management System 31 records HIGH Student Record System 29 records HIGH Beauty Parlour Management System 28 records HIGH

Records

15 records in Rail Pass Management System · all components

TI-2025-04993 CVE-2025-5553 · GHSA-wgp9-c2jp-6pqr

PHPGurukul Rail Pass Management System download-pass.php sql injection

HIGH 70

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00534 Published 2025-06-04 No fix listed CWE-74

TI-2025-03610 CVE-2025-4070 · GHSA-969p-47jr-q9pv

PHPGurukul Rail Pass Management System changeimage.php sql injection

HIGH 70

A vulnerability, which was classified as critical, was found in PHPGurukul Rail Pass Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00639 Published 2025-04-29 No fix listed CWE-74

TI-2025-03582 CVE-2025-4039 · GHSA-9wr5-868p-4jmw

PHPGurukul Rail Pass Management System search-pass.php sql injection

HIGH 70

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00562 Published 2025-04-28 No fix listed CWE-74

TI-2023-15280 CVE-2023-31936 · GHSA-43c6-24rr-4553

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote…

HIGH 67

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01297 Published 2023-07-28 No fix listed CWE-89

TI-2025-05536 CVE-2025-6126 · GHSA-hj7h-6h3r-j72w

PHPGurukul Rail Pass Management System contact.php cross site scripting

MEDIUM 57

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00381 Published 2025-06-16 No fix listed CWE-79

TI-2025-05397 CVE-2025-5975 · GHSA-cx36-hwm9-j7v8

PHPGurukul Rail Pass Management System download-pass.php cross site scripting

MEDIUM 57

A vulnerability, which was classified as problematic, was found in PHPGurukul Rail Pass Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00464 Published 2025-06-10 No fix listed CWE-79

TI-2025-04994 CVE-2025-5554 · GHSA-jhh9-3g95-rc59

PHPGurukul Rail Pass Management System pass-bwdates-reports-details.php sql injection

MEDIUM 57

A vulnerability, which was classified as critical, has been found in PHPGurukul Rail Pass Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00438 Published 2025-06-04 No fix listed CWE-74

TI-2025-05398 CVE-2025-5976 · GHSA-9fg6-655w-rjj5

PHPGurukul Rail Pass Management System add-pass.php cross site scripting

MEDIUM 56

A vulnerability has been found in PHPGurukul Rail Pass Management System 1.0 and classified as problematic.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00337 Published 2025-06-10 No fix listed CWE-79

TI-2025-05535 CVE-2025-6125 · GHSA-fvrq-r854-9pwq

PHPGurukul Rail Pass Management System aboutus.php cross site scripting

MEDIUM 55

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00297 Published 2025-06-16 No fix listed CWE-79

TI-2023-03068 CVE-2023-3275 · GHSA-4vfp-7m96-54c6

PHPGurukul Rail Pass Management System POST Request view-pass-detail.php sql injection

MEDIUM 43

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0055 Published 2023-06-15 No fix listed CWE-89

TI-2023-15281 CVE-2023-31937 · GHSA-jp66-6jmv-x34c

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote…

LOW 34

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01127 Published 2023-07-28 No fix listed CWE-89

TI-2023-15277 CVE-2023-31933 · GHSA-gc2j-3pp2-p94m

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote…

LOW 34

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01297 Published 2023-07-28 No fix listed CWE-89

TI-2023-15276 CVE-2023-31932 · GHSA-v3vj-f5qg-2w5x

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote…

LOW 34

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01297 Published 2023-07-28 No fix listed CWE-89

TI-2023-15279 CVE-2023-31935 · GHSA-x5c8-qgv4-3678

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a…

LOW 23

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00594 Published 2023-07-28 No fix listed CWE-79

TI-2023-15278 CVE-2023-31934 · GHSA-wxfm-v7w9-3w7w

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a…

LOW 23

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00579 Published 2023-07-28 No fix listed CWE-79

Open these records in search →