PHPGurukul
- Total products in the ecosystem
- 36
- Total vulnerabilities (90 days)
- 15
en
Verify to analyze this security profile
As of 09/16/2026, PHPGurukul recorded 15 security vulnerabilities in the last 90 days across 8 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Bank Locker Management System had the most security vulnerabilities in the PHPGurukul ecosystem, with 3 vulnerabilities—approximately 20% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-90851PHPGurukul Hostel Management System checklogin.php access control | Exploitation statusPublic exploit | FixNot confirmed | Affected productHostel Management System | Published09/15/2026 | SeverityMedium |
CVE-2026-90850PHPGurukul Hostel Management System manage-students.php cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productHostel Management System | Published09/15/2026 | SeverityMedium |
CVE-2026-90846PHPGurukul Daily Expense Tracker System forgot-password.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productDaily Expense Tracker System | Published09/15/2026 | SeverityMedium |
CVE-2026-90845PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productDaily Expense Tracker System | Published09/15/2026 | SeverityMedium |
CVE-2026-90844PHPGurukul Daily Expense Tracker System Login index.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productDaily Expense Tracker System | Published09/15/2026 | SeverityMedium |
CVE-2026-90842PHPGurukul Blood Donor Management System Login_Model.php cleartext storage in file | Exploitation statusPublic exploit | FixNot confirmed | Affected productBlood Donor Management System | Published09/14/2026 | SeverityMedium |
CVE-2026-90841PHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productBlood Donor Management System | Published09/14/2026 | SeverityMedium |
CVE-2026-90840PHPGurukul Blood Donor Management System Admin Controllers Dashboard.php __construct improper authentication | Exploitation statusPublic exploit | FixNot confirmed | Affected productBlood Donor Management System | Published09/14/2026 | SeverityMedium |
CVE-2026-90575PHPGurukul Small CRM Login Success login.php unserialize deserialization | Exploitation statusPublic exploit | FixNot confirmed | Affected productSmall CRM | Published09/13/2026 | SeverityMedium |
CVE-2026-90519PHPGurukul Bank Locker Management System add-locker-form.php unrestricted upload | Exploitation statusPublic exploit | FixNot confirmed | Affected productBank Locker Management System | Published09/13/2026 | SeverityMedium |
CVE-2026-90518PHPGurukul Bank Locker Management System sidebar.php access control | Exploitation statusPublic exploit | FixNot confirmed | Affected productBank Locker Management System | Published09/13/2026 | SeverityMedium |
CVE-2026-90517PHPGurukul Bank Locker Management System view-assign-locker.php authorization | Exploitation statusPublic exploit | FixNot confirmed | Affected productBank Locker Management System | Published09/13/2026 | SeverityMedium |
CVE-2026-82424PHPGurukul Student Information System student_edit1.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productStudent Information System | Published08/29/2026 | SeverityMedium |
CVE-2026-75089PHPGurukul Complaint Management System check_availability.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productComplaint Management system | Published08/18/2026 | SeverityMedium |
CVE-2026-19207PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productCompany Visitor Management System | Published08/07/2026 | SeverityMedium |
CVE-2026-6193PHPGurukul Daily Expense Tracking System register.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productDaily Expense Tracking System | Published04/13/2026 | SeverityMedium |
CVE-2026-6162PHPGurukul Company Visitor Management System bwdates-reports-details.php cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productCompany Visitor Management System | Published04/13/2026 | SeverityMedium |
CVE-2026-5840PHPGurukul News Portal Project check_availability.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productNews Portal Project | Published04/09/2026 | SeverityMedium |
CVE-2026-5839PHPGurukul News Portal Project add-subcategory.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productNews Portal Project | Published04/09/2026 | SeverityMedium |
CVE-2026-5838PHPGurukul News Portal Project add-subadmins.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productNews Portal Project | Published04/09/2026 | SeverityMedium |
CVE-2026-5837PHPGurukul News Portal Project news-details.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productNews Portal Project | Published04/09/2026 | SeverityMedium |
CVE-2026-5814PHPGurukul Online Course Registration check_availability.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Course Registration | Published04/08/2026 | SeverityMedium |
CVE-2026-5813PHPGurukul Online Course Registration check_availability.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Course Registration | Published04/08/2026 | SeverityMedium |
CVE-2026-5641PHPGurukul Online Shopping Portal Project Parameter update-image1.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Shopping Portal Project | Published04/06/2026 | SeverityMedium |
CVE-2026-5640PHPGurukul Online Shopping Portal Project Parameter update-image2.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Shopping Portal Project | Published04/06/2026 | SeverityMedium |
CVE-2026-5639PHPGurukul Online Shopping Portal Project Parameter update-image3.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Shopping Portal Project | Published04/06/2026 | SeverityMedium |
CVE-2026-5636PHPGurukul Online Shopping Portal Project Parameter cancelorder.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Shopping Portal Project | Published04/06/2026 | SeverityMedium |
CVE-2026-5635PHPGurukul Online Shopping Portal Project Parameter categorywise-products.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Shopping Portal Project | Published04/06/2026 | SeverityMedium |
CVE-2026-5606PHPGurukul Online Shopping Portal Project Parameter order-details.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Shopping Portal Project | Published04/06/2026 | SeverityMedium |
CVE-2026-5583PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Shopping Portal Project | Published04/05/2026 | SeverityMedium |
CVE-2026-5560PHPGurukul Online Shopping Portal Project Parameter payment-method.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Shopping Portal Project | Published04/05/2026 | SeverityMedium |
CVE-2026-5558PHPGurukul PHPGurukul Online Shopping Portal Project Parameter pending-orders.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productPHPGurukul Online Shopping Portal Project | Published04/05/2026 | SeverityMedium |
CVE-2026-5552PHPGurukul Online Shopping Portal Project Parameter sub-category.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Shopping Portal Project | Published04/05/2026 | SeverityMedium |
CVE-2026-5543PHPGurukul User Registration & Login and User Management System yesterday-reg-users.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productUser Registration & Login and User Management System | Published04/05/2026 | SeverityMedium |
CVE-2024-51226 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published03/23/2026 | SeverityMedium |
CVE-2024-51223 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published03/23/2026 | SeverityMedium |
CVE-2024-51224 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published03/23/2026 | SeverityMedium |
CVE-2024-51222 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published03/23/2026 | SeverityMedium |
CVE-2024-51225 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published03/23/2026 | SeverityMedium |
CVE-2026-3403PHPGurukul Student Record Management System edit-subject.php cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productStudent Record Management System | Published03/02/2026 | SeverityMedium |
CVE-2026-3402PHPGurukul Student Record Management System edit-course.php cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productStudent Record Management System | Published03/02/2026 | SeverityMedium |
CVE-2025-70064 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published02/18/2026 | SeverityHigh |
CVE-2025-70063 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published02/18/2026 | SeverityMedium |
CVE-2025-70062 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published02/18/2026 | SeverityMedium |
CVE-2024-55270 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published02/17/2026 | SeverityHigh |
CVE-2024-55271 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published02/17/2026 | SeverityLow |
CVE-2026-2179PHPGurukul Hospital Management System manage-users.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productHospital Management System | Published02/08/2026 | SeverityMedium |
CVE-2026-2134PHPGurukul Hospital Management System manage-doctors.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productHospital Management System | Published02/08/2026 | SeverityMedium |
CVE-2026-2088PHPGurukul Beauty Parlour Management System accepted-appointment.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productBeauty Parlour Management System | Published02/07/2026 | SeverityMedium |
CVE-2026-1550PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization | Exploitation statusPublic exploit | FixNot confirmed | Affected productHospital Management System | Published01/28/2026 | SeverityMedium |
CVE-2026-1424PHPGurukul News Portal Profile Pic unrestricted upload | Exploitation statusPublic exploit | FixNot confirmed | Affected productNews Portal | Published01/26/2026 | SeverityMedium |
CVE-2025-70899 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/22/2026 | SeverityMedium |
CVE-2026-1160PHPGurukul Directory Management System Search index.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productDirectory Management System | Published01/19/2026 | SeverityMedium |
CVE-2026-1142PHPGurukul News Portal cross-site request forgery | Exploitation statusPublic exploit | FixNot confirmed | Affected productNews Portal | Published01/19/2026 | SeverityMedium |
CVE-2026-1141PHPGurukul News Portal Add Sub-Admin add-subadmins.php improper authorization | Exploitation statusPublic exploit | FixNot confirmed | Affected productNews Portal | Published01/19/2026 | SeverityMedium |
CVE-2025-70893 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/15/2026 | SeverityHigh |
CVE-2025-70890 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/15/2026 | SeverityMedium |
CVE-2025-70891 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/15/2026 | SeverityMedium |
CVE-2025-70892 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/15/2026 | SeverityCritical |
CVE-2025-69992 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/13/2026 | SeverityCritical |
CVE-2025-69990 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/13/2026 | SeverityCritical |
CVE-2025-69991 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/13/2026 | SeverityCritical |
CVE-2026-0803PHPGurukul Online Course Registration System enroll.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Course Registration System | Published01/09/2026 | SeverityMedium |
CVE-2026-0733PHPGurukul Online Course Registration System manage-students.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Course Registration System | Published01/08/2026 | SeverityMedium |
CVE-2026-0730PHPGurukul Staff Leave Management System SVG File adminviews.py UPDATE_STAFF cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productStaff Leave Management System | Published01/08/2026 | SeverityMedium |
CVE-2025-63611 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/08/2026 | SeverityHigh |
CVE-2025-67315 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/05/2026 | SeverityUnknown |
CVE-2026-0547PHPGurukul Online Course Registration Student Registration edit-student-profile.php unrestricted upload | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Course Registration | Published01/02/2026 | SeverityMedium |
CVE-2025-15406PHPGurukul Online Course Registration authorization | Exploitation statusPublic exploit | FixNot confirmed | Affected productOnline Course Registration | Published01/01/2026 | SeverityMedium |
CVE-2025-15390PHPGurukul Small CRM edit-user.php authorization | Exploitation statusPublic exploit | FixNot confirmed | Affected productSmall CRM | Published12/31/2025 | SeverityMedium |
CVE-2025-65380 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published12/02/2025 | SeverityMedium |
CVE-2025-65379 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published12/02/2025 | SeverityMedium |
CVE-2025-65647 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/25/2025 | SeverityMedium |
CVE-2025-13577PHPGurukul Hostel Management System register-complaint.php cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productHostel Management System | Published11/24/2025 | SeverityMedium |
CVE-2025-63955 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/18/2025 | SeverityHigh |
CVE-2024-44658 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44641 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44657 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44660 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44663 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44655 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44654 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44662 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44644 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44659 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityCritical |
CVE-2024-46335 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44648 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44664 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44647 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2024-44661 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/17/2025 | SeverityMedium |
CVE-2025-13247PHPGurukul Tourism Management System user-bookings.php sql injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productTourism Management System | Published11/16/2025 | SeverityMedium |
CVE-2024-44630 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/14/2025 | SeverityMedium |
CVE-2024-44639 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/14/2025 | SeverityMedium |
CVE-2024-44640 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/14/2025 | SeverityMedium |
CVE-2024-44632 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/14/2025 | SeverityMedium |
CVE-2024-44633 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/14/2025 | SeverityMedium |
CVE-2024-44635 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/14/2025 | SeverityMedium |
CVE-2024-55016 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/14/2025 | SeverityMedium |
CVE-2024-44636 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/14/2025 | SeverityMedium |
CVE-2025-12616PHPGurukul News Portal settings.py insertion of sensitive information into debugging code | Exploitation statusPublic exploit | FixNot confirmed | Affected productNews Portal | Published11/03/2025 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan