Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:teacher_subject_allocation_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductTeacher Subject Allocation Management System (67090f10-b4a6-5e93-b593-ec8a828680cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ersinerenler/phpgurukul-teacher-subject-allocation-management-system-1.0 purl2cpe 2026-06-01 10:12:14.276680

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5558 vulnerable 2026-06-03 15:07:54.045936 PHPGurukul Teacher Subject Allocation Management System changeimage.php sql injection
MEDIUM (6.3)
A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T04:00:28.050Z
Updated: 2025-06-04T13:47:31.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5557 vulnerable 2026-06-03 15:07:54.045548 PHPGurukul Teacher Subject Allocation Management System edit-course.php sql injection
MEDIUM (6.3)
A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-course.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T03:31:06.715Z
Updated: 2025-06-04T13:48:31.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5556 vulnerable 2026-06-03 15:07:54.045043 PHPGurukul Teacher Subject Allocation Management System edit-teacher-info.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in PHPGurukul Teacher Subject Allocation Management System 1.0. This affects an unknown part of the file /admin/edit-teacher-info.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T03:00:20.894Z
Updated: 2025-06-04T13:49:36.778Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4241 vulnerable 2026-06-03 15:01:47.300418 PHPGurukul Teacher Subject Allocation Management System search.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-03T18:00:10.499Z
Updated: 2025-05-06T14:21:52.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6766 vulnerable 2026-06-03 14:53:58.935947 PHPGurukul Teacher Subject Allocation Management System Delete Course course.php cross-site request forgery
MEDIUM (4.3)
A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247896.
Published: 2023-12-13T17:31:05.176Z
Updated: 2024-10-08T14:26:33.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6653 vulnerable 2026-06-03 14:53:58.614195 PHPGurukul Teacher Subject Allocation Management System Create a new Subject subject.php cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/subject.php of the component Create a new Subject. The manipulation of the argument cid leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-247346 is the identifier assigned to this vulnerability.
Published: 2023-12-10T12:31:03.928Z
Updated: 2024-08-02T08:35:14.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6649 vulnerable 2026-06-03 14:53:58.607035 PHPGurukul Teacher Subject Allocation Management System index.php cross site scripting
MEDIUM (4.3)
A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file index.php. The manipulation of the argument searchdata with the input <script>alert(5)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-247342 is the identifier assigned to this vulnerability.
Published: 2023-12-10T10:00:05.072Z
Updated: 2024-08-02T08:35:14.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46026 vulnerable 2026-06-03 14:53:08.836601 Details available
Cross Site Scripting (XSS) vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters.
Published: 2023-11-14T00:00:00.000Z
Updated: 2024-09-03T14:58:04.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46025 vulnerable 2026-06-03 14:53:08.836183 Details available
SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter.
Published: 2023-11-14T00:00:00.000Z
Updated: 2024-09-03T15:10:03.742Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46024 vulnerable 2026-06-03 14:53:08.835683 Details available
SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter.
Published: 2023-11-14T00:00:00.000Z
Updated: 2024-09-03T15:29:32.422Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.