GCVE - cpe:2.3:a:phpgurukul:company_visitor_management

Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:company_visitor_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Phpgurukul (`43390843-85b8-5d5e-9218-29dc10c3657d`)
Product	Company Visitor Management System (`4b4e1e9a-2476-5611-aa24-a297e97d06d5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-6162`	vulnerable	2026-06-08 08:07:04.513532	PHPGurukul Company Visitor Management System bwdates-reports-details.php cross site scripting LOW (3.5) A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Published: 2026-04-13T05:00:14.044Z Updated: 2026-04-13T11:28:25.916Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/357048 https://vuldb.com/vuln/357048/cti https://vuldb.com/submit/797171 https://github.com/f1rstb100d/CVE/issues/44 https://phpgurukul.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5248`	vulnerable	2026-06-08 07:35:24.538482	PHPGurukul Company Visitor Management System bwdates-reports-details.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 1.0. Affected is an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-27T16:00:07.504Z Updated: 2025-05-27T16:34:30.142Z Open on db.gcve.eu Reference links https://vuldb.com/?id.310350 https://vuldb.com/?ctiid.310350 https://vuldb.com/?submit.584823 https://github.com/zzb1388/zzb1/issues/8 https://phpgurukul.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5231`	vulnerable	2026-06-08 07:35:24.442285	PHPGurukul Company Visitor Management System forgot-password.php sql injection HIGH (7.3) A vulnerability classified as critical was found in PHPGurukul Company Visitor Management System 1.0. This vulnerability affects unknown code of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-27T04:31:06.177Z Updated: 2025-05-27T20:01:40.463Z Open on db.gcve.eu Reference links https://vuldb.com/?id.310330 https://vuldb.com/?ctiid.310330 https://vuldb.com/?submit.584438 https://github.com/zzb1388/zzb1/issues/2 https://phpgurukul.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4717`	vulnerable	2026-06-08 07:29:17.137045	PHPGurukul Company Visitor Management System visitors-form.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /visitors-form.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-15T20:00:09.333Z Updated: 2025-05-16T13:34:20.825Z Open on db.gcve.eu Reference links https://vuldb.com/?id.309018 https://vuldb.com/?ctiid.309018 https://vuldb.com/?submit.568331 https://github.com/baixiaobai001/myCVE/issues/7 https://phpgurukul.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4361`	vulnerable	2026-06-08 07:29:16.097096	PHPGurukul Company Visitor Management System department.php sql injection HIGH (7.3) A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. This affects an unknown part of the file /department.php. The manipulation of the argument departmentname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-06T14:31:08.220Z Updated: 2025-05-06T15:02:48.105Z Open on db.gcve.eu Reference links https://vuldb.com/?id.307485 https://vuldb.com/?ctiid.307485 https://vuldb.com/?submit.564750 https://github.com/Pjwww13447/pjwww/issues/3 https://phpgurukul.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4358`	vulnerable	2026-06-08 07:29:16.095365	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4332`	vulnerable	2026-06-08 07:29:16.045533	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2473`	vulnerable	2026-06-08 07:16:57.071325	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0652`	vulnerable	2026-06-08 06:22:01.636552	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0651`	vulnerable	2026-06-08 06:22:01.634733	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Company Visitor Management System

PURL mappings

Vulnerability references

Contribute