Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:user_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductUser Management System (ea9c450b-2138-5f33-945b-a9fc96beb16a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9756 vulnerable 2026-06-08 07:47:09.726049 PHPGurukul User Management System change-emailid.php sql injection
MEDIUM (6.3)
A vulnerability was found in PHPGurukul User Management System 1.0. This impacts an unknown function of the file /admin/change-emailid.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Published: 2025-09-01T02:02:07.067Z
Updated: 2025-09-02T15:11:48.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9302 vulnerable 2026-06-08 07:45:22.224485 PHPGurukul User Management System signup.php sql injection
HIGH (7.3)
A vulnerability was identified in PHPGurukul User Management System 1.0. This vulnerability affects unknown code of the file /signup.php. Such manipulation of the argument emailid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Published: 2025-08-21T14:02:06.977Z
Updated: 2025-08-21T14:24:04.582Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10624 vulnerable 2026-06-08 07:02:27.225209 PHPGurukul User Management System login.php sql injection
HIGH (7.3)
A security flaw has been discovered in PHPGurukul User Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument emailid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
Published: 2025-09-17T22:32:11.654Z
Updated: 2025-09-18T13:28:47.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10098 vulnerable 2026-06-08 07:02:26.296110 PHPGurukul User Management System edit-user-profile.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in PHPGurukul User Management System 1.0. Affected is an unknown function of the file /admin/edit-user-profile.php. The manipulation of the argument uid results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited.
Published: 2025-09-08T17:02:07.736Z
Updated: 2025-10-15T15:59:35.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50991 vulnerable 2026-06-08 06:52:11.572438 Details available
A Cross Site Scripting (XSS) vulnerability was found in /ums-sp/admin/registered-users.php in PHPGurukul User Management System v1.0, which allows remote attackers to execute arbitrary code via the "fname" POST request parameter
Published: 2024-11-11T00:00:00.000Z
Updated: 2024-11-12T19:11:09.211Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.