Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:bp_monitoring_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductBp Monitoring Management System (d8bc6dc3-2d1c-57d9-8a7f-845d159e64cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/vsdwef/bp-monitoring-management-system purl2cpe 2026-06-01 10:12:14.280189

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8134 vulnerable 2026-06-03 15:13:42.974490 PHPGurukul BP Monitoring Management System bwdates-report-result.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-25T06:02:06.609Z
Updated: 2025-07-25T11:48:01.254Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5856 vulnerable 2026-06-03 15:07:54.847616 PHPGurukul BP Monitoring Management System registration.php sql injection
HIGH (7.3)
A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /registration.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-09T02:00:16.705Z
Updated: 2025-06-09T02:59:42.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5761 vulnerable 2026-06-03 15:07:54.569091 PHPGurukul BP Monitoring Management System edit-family-member.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in PHPGurukul BP Monitoring Management System 1.0. This issue affects some unknown processing of the file /edit-family-member.php. The manipulation of the argument memberage leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-06T11:31:06.662Z
Updated: 2025-06-06T16:50:06.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1950 vulnerable 2026-06-03 14:48:56.747014 PHPGurukul BP Monitoring Management System Password Recovery password-recovery.php sql injection
MEDIUM (6.3)
A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file password-recovery.php of the component Password Recovery. The manipulation of the argument emailid/contactno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225337 was assigned to this vulnerability.
Published: 2023-04-08T07:31:03.808Z
Updated: 2024-08-02T06:05:27.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1949 vulnerable 2026-06-03 14:48:56.746701 PHPGurukul BP Monitoring Management System Change Password change-password.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file change-password.php of the component Change Password Handler. The manipulation of the argument password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225336.
Published: 2023-04-08T07:00:06.895Z
Updated: 2024-08-02T06:05:27.081Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1948 vulnerable 2026-06-03 14:48:56.746346 PHPGurukul BP Monitoring Management System Add New Family Member add-family-member.php cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, has been found in PHPGurukul BP Monitoring Management System 1.0. This issue affects some unknown processing of the file add-family-member.php of the component Add New Family Member Handler. The manipulation of the argument Member Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225335.
Published: 2023-04-08T06:31:03.381Z
Updated: 2024-08-02T06:05:27.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1909 vulnerable 2026-06-03 14:48:56.680568 PHPGurukul BP Monitoring Management System User Profile Update profile.php sql injection
MEDIUM (4.7)
A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file profile.php of the component User Profile Update Handler. The manipulation of the argument name/mobno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225318 is the identifier assigned to this vulnerability.
Published: 2023-04-07T17:00:04.682Z
Updated: 2024-08-02T06:05:26.850Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.