Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:user_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductUser Management System (ea9c450b-2138-5f33-945b-a9fc96beb16a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9756 vulnerable 2026-06-08 07:47:09.725213 PHPGurukul User Management System change-emailid.php sql injection
MEDIUM (6.3)
A vulnerability was found in PHPGurukul User Management System 1.0. This impacts an unknown function of the file /admin/change-emailid.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Published: 2025-09-01T02:02:07.067Z
Updated: 2025-09-02T15:11:48.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9302 vulnerable 2026-06-08 07:45:22.223658 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10624 vulnerable 2026-06-08 07:02:27.225094 PHPGurukul User Management System login.php sql injection
HIGH (7.3)
A security flaw has been discovered in PHPGurukul User Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument emailid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
Published: 2025-09-17T22:32:11.654Z
Updated: 2025-09-18T13:28:47.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10098 vulnerable 2026-06-08 07:02:26.295277 PHPGurukul User Management System edit-user-profile.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in PHPGurukul User Management System 1.0. Affected is an unknown function of the file /admin/edit-user-profile.php. The manipulation of the argument uid results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited.
Published: 2025-09-08T17:02:07.736Z
Updated: 2025-10-15T15:59:35.656Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.