Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:rail_pass_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductRail Pass Management System (3129f7e9-73d3-5911-a8e3-9a3f02f8cf7a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6126 vulnerable 2026-06-08 07:43:14.336721 PHPGurukul Rail Pass Management System contact.php cross site scripting
MEDIUM (4.3)
A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /contact.php. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-06-16T14:31:06.253Z
Updated: 2025-06-16T15:45:24.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6125 vulnerable 2026-06-08 07:43:14.336114 PHPGurukul Rail Pass Management System aboutus.php cross site scripting
LOW (2.4)
A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagedes leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-16T14:00:12.086Z
Updated: 2025-06-16T14:46:39.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5976 vulnerable 2026-06-08 07:37:26.187336 PHPGurukul Rail Pass Management System add-pass.php cross site scripting
LOW (3.5)
A vulnerability has been found in PHPGurukul Rail Pass Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/add-pass.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-06-10T20:00:13.611Z
Updated: 2025-06-10T20:19:25.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5975 vulnerable 2026-06-08 07:37:26.186976 PHPGurukul Rail Pass Management System download-pass.php cross site scripting
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /rpms/download-pass.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-10T19:31:09.240Z
Updated: 2025-06-10T20:11:36.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5554 vulnerable 2026-06-08 07:37:25.154942 PHPGurukul Rail Pass Management System pass-bwdates-reports-details.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in PHPGurukul Rail Pass Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/pass-bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T02:31:06.371Z
Updated: 2025-06-04T13:50:46.006Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5553 vulnerable 2026-06-08 07:37:25.154343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4070 vulnerable 2026-06-08 07:29:15.349669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4039 vulnerable 2026-06-08 07:29:15.303466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3275 vulnerable 2026-06-08 06:09:39.051161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31937 vulnerable 2026-06-08 06:04:43.609608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31936 vulnerable 2026-06-08 06:04:43.609283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31935 vulnerable 2026-06-08 06:04:43.608891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31934 vulnerable 2026-06-08 06:04:43.608653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31933 vulnerable 2026-06-08 06:04:43.608286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31932 vulnerable 2026-06-08 06:04:43.607788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.