Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:user_registration_\&_login_and_user_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductUser Registration & Login And User Management System (577dbc44-428a-5fdf-b398-8ee649d3d2f3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25202 vulnerable 2026-06-08 06:31:22.628802 Details available
Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and User Management System 1.0 allows attackers to run arbitrary code via the search bar.
Published: 2024-02-28T00:00:00.000Z
Updated: 2025-04-22T15:59:52.624Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11818 vulnerable 2026-06-08 06:23:50.447791 PHPGurukul User Registration & Login and User Management System signup.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and User Management System 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-26T23:31:04.981Z
Updated: 2024-11-27T14:52:37.281Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11817 vulnerable 2026-06-08 06:23:50.446922 PHPGurukul User Registration & Login and User Management System index.php sql injection
HIGH (7.3)
A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-26T23:00:09.550Z
Updated: 2024-11-27T14:55:17.063Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.