Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

24 records

Priority MEDIUM 55

A Reflected Cross-Site Scripting (XSS) vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00257 Published 2025-09-30 No fix listed CWE-79
Priority MEDIUM 62

A SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration & Login and User Management System v3.3 allows remote attackers to execute arbitrary code via the currentpassword POST request…

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.00295 Published 2025-03-13 No fix listed CWE-89
Priority HIGH 68

A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL commands to get unauthorize…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00423 Published 2024-10-15 No fix listed CWE-89
Priority HIGH 68

A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parame…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00463 Published 2024-10-15 No fix listed CWE-89