Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:rail_pass_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductRail Pass Management System (3129f7e9-73d3-5911-a8e3-9a3f02f8cf7a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6126 vulnerable 2026-06-08 07:43:14.336674 PHPGurukul Rail Pass Management System contact.php cross site scripting
MEDIUM (4.3)
A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /contact.php. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-06-16T14:31:06.253Z
Updated: 2025-06-16T15:45:24.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6125 vulnerable 2026-06-08 07:43:14.334984 PHPGurukul Rail Pass Management System aboutus.php cross site scripting
LOW (2.4)
A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagedes leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-16T14:00:12.086Z
Updated: 2025-06-16T14:46:39.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5976 vulnerable 2026-06-08 07:37:26.187305 PHPGurukul Rail Pass Management System add-pass.php cross site scripting
LOW (3.5)
A vulnerability has been found in PHPGurukul Rail Pass Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/add-pass.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-06-10T20:00:13.611Z
Updated: 2025-06-10T20:19:25.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5975 vulnerable 2026-06-08 07:37:26.186943 PHPGurukul Rail Pass Management System download-pass.php cross site scripting
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /rpms/download-pass.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-10T19:31:09.240Z
Updated: 2025-06-10T20:11:36.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5554 vulnerable 2026-06-08 07:37:25.154767 PHPGurukul Rail Pass Management System pass-bwdates-reports-details.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in PHPGurukul Rail Pass Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/pass-bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T02:31:06.371Z
Updated: 2025-06-04T13:50:46.006Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5553 vulnerable 2026-06-08 07:37:25.153230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4070 vulnerable 2026-06-08 07:29:15.349503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4039 vulnerable 2026-06-08 07:29:15.302510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3275 vulnerable 2026-06-08 06:09:39.050244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.