Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:user_registration_\&_login_and_user_management_system:3.2:*:*:*:*:*:*:*

part: a version: 3.2 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductUser Registration & Login And User Management System (577dbc44-428a-5fdf-b398-8ee649d3d2f3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-50843 vulnerable 2026-06-08 06:52:11.468236 Details available
A Directory listing issue was found in PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers attacker to access sensitive files and directories via /loginsystem/assets.
Published: 2024-11-14T00:00:00.000Z
Updated: 2024-11-14T18:34:05.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48284 vulnerable 2026-06-08 06:48:13.718176 Details available
A Reflected Cross-Site Scripting (XSS) vulnerability was found in the /search-result.php page of the PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary scripts via the searchkey parameter in a POST HTTP request.
Published: 2024-11-14T00:00:00.000Z
Updated: 2024-11-18T18:07:49.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48283 vulnerable 2026-06-08 06:48:13.717647 Details available
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter.
Published: 2024-10-15T00:00:00.000Z
Updated: 2024-10-15T16:11:05.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48282 vulnerable 2026-06-08 06:48:13.715527 Details available
A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the femail parameter in a POST HTTP request.
Published: 2024-10-15T00:00:00.000Z
Updated: 2024-10-15T15:01:57.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48280 vulnerable 2026-06-08 06:48:13.715201 Details available
A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parameter in a POST HTTP request.
Published: 2024-10-15T00:00:00.000Z
Updated: 2024-10-15T15:24:11.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48279 vulnerable 2026-06-08 06:48:13.714845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48278 vulnerable 2026-06-08 06:48:13.714284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.