Priority LOW 27
Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting (XSS) vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML and JavaScript injection, potentially resulti…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00246 · Published 2025-10-21 · No fix listed CWE-79
Priority MEDIUM 64
Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00339 · Published 2025-07-28 · No fix listed CWE-613
Priority HIGH 70
A vulnerability, which was classified as critical, has been found in PHPGurukul Bank Locker Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00537 · Published 2025-03-24 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00537 · Published 2025-03-24 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00483 · Published 2025-03-24 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00537 · Published 2025-03-24 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00502 · Published 2025-03-24 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00502 · Published 2025-03-24 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00537 · Published 2025-03-24 · No fix listed CWE-74
Priority HIGH 70
A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00537 · Published 2025-03-24 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, was found in PHPGurukul Bank Locker Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00502 · Published 2025-03-24 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00537 · Published 2025-03-24 · No fix listed CWE-74
Priority HIGH 70
A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00537 · Published 2025-03-23 · No fix listed CWE-74
Priority MEDIUM 47
A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01019 · Published 2023-04-09 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00726 · Published 2023-04-09 · No fix listed CWE-89
Priority MEDIUM 49
A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.37608 · Published 2023-01-28 · No fix listed CWE-79
Priority HIGH 81
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.44268 · Published 2023-01-28 · No fix listed CWE-89
THREATIST.IORead the docs