Vulnerabilities

TI-2025-04827 CVE-2025-5375 · GHSA-hvj4-qf24-vggm

PHPGurukul HPGurukul Online Birth Certificate System registered-users.php sql injection

MEDIUM 57

A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00295 Published 2025-05-31 No fix listed CWE-74

TI-2025-04826 CVE-2025-5374 · GHSA-qw9v-w977-pp2h

PHPGurukul Online Birth Certificate System all-applications.php sql injection

MEDIUM 57

A vulnerability was found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00295 Published 2025-05-31 No fix listed CWE-74

TI-2025-04825 CVE-2025-5373 · GHSA-45cf-9mc2-p552

PHPGurukul Online Birth Certificate System users-applications.php sql injection

MEDIUM 57

A vulnerability has been found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0028 Published 2025-05-31 No fix listed CWE-74

TI-2025-03775 CVE-2025-4242 · GHSA-hgm9-29r5-x94q

PHPGurukul Online Birth Certificate System between-dates-report.php sql injection

HIGH 70

A vulnerability classified as critical was found in PHPGurukul Online Birth Certificate System 2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00396 Published 2025-05-03 No fix listed CWE-74

TI-2025-03746 CVE-2025-4213 · GHSA-7h34-vg77-fj7j

PHPGurukul Online Birth Certificate System search.php sql injection

HIGH 70

A vulnerability has been found in PHPGurukul Online Birth Certificate System 1.0 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00356 Published 2025-05-02 No fix listed CWE-74

TI-2025-03689 CVE-2025-4152 · GHSA-jqcw-jj5v-2h9g

PHPGurukul Online Birth Certificate System bwdates-reports-details.php sql injection

HIGH 70

A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00356 Published 2025-05-01 No fix listed CWE-74

TI-2024-37812 CVE-2024-57175 · GHSA-g4g8-fg62-3c66

A Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online…

MEDIUM 58

A Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0 via the profile name to /user/certificate-form.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00282 Published 2025-02-03 No fix listed CWE-79

TI-2024-36760 CVE-2024-55059 · GHSA-hw97-cgm7-v26g

A stored HTML Injection vulnerability was identified in PHPGurukul Online Birth…

MEDIUM 60

A stored HTML Injection vulnerability was identified in PHPGurukul Online Birth Certificate System v1.0 in /user/certificate-form.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00204 Published 2024-12-17 No fix listed CWE-79

TI-2024-36759 CVE-2024-55058 · GHSA-527r-mrh4-wx97

An insecure direct object reference (IDOR) vulnerability was discovered in PHPGurukul…

MEDIUM 53

An insecure direct object reference (IDOR) vulnerability was discovered in PHPGurukul Online Birth Certificate System v1.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0024 Published 2024-12-17 No fix listed CWE-706

TI-2024-36758 CVE-2024-55057 · GHSA-wv62-mc54-722c

Phpgurukul Online Birth Certificate System 1.0 suffers from insufficient password…

MEDIUM 58

Phpgurukul Online Birth Certificate System 1.0 suffers from insufficient password requirements which can lead to unauthorized access to user accounts.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00138 Published 2024-12-17 No fix listed CWE-916

TI-2024-36757 CVE-2024-55056 · GHSA-9r59-cc3r-2gm6

A stored cross-site scripting (XSS) vulnerability was identified in Phpgurukul Online…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability was identified in Phpgurukul Online Birth Certificate System 1.0 in /user/certificate-form.php via the full name field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00193 Published 2024-12-17 No fix listed CWE-79

TI-2022-11582 CVE-2022-29005 · GHSA-2v6j-q8j6-q6m9

Multiple cross-site scripting (XSS) vulnerabilities in the component…

LOW 31

Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02178 Published 2022-05-23 No fix listed CWE-79

Vulnerabilities

Filters