Read the docs

PHPGurukul

Records1122All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical133CVSS 9.0–10.0
CVSS high107CVSS 7.0–8.9

Exploited now

PHPGurukul records in CISA KEV

No PHPGurukul vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

24 records in User Registration & Login And User Management System · all components

Priority HIGH 68

A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL commands to get unauthorize…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00423 Published 2024-10-15 No fix listed CWE-89
Priority HIGH 68

A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parame…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00463 Published 2024-10-15 No fix listed CWE-89
Priority MEDIUM 62

A SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration & Login and User Management System v3.3 allows remote attackers to execute arbitrary code via the currentpassword POST request…

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.00295 Published 2025-03-13 No fix listed CWE-89
Priority MEDIUM 55

A Reflected Cross-Site Scripting (XSS) vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00257 Published 2025-09-30 No fix listed CWE-79
Open these records in search →