Skip to content
OpenAdvisories

Vendor

PHPGurukul

722 known vulnerabilities.

Products

Online Fire Reporting System 28 Art Gallery Management System 26 Complaint Management System 22 Beauty Parlour Management System 21 Apartment Visitors Management System 20 Zoo Management System 20 Hospital Management System 20 Bank Locker Management System 19 Nipah Virus Testing Management System 18 Boat Booking System 17 Online Shopping Portal 17 Emergency Ambulance Hiring Portal 17 Vehicle Parking Management System 17 Pre-School Enrollment System 16 Old Age Home Management System 16 Restaurant Table Booking System 15 Men Salon Management System 15 Small CRM 14 Student Record System 14 Land Record System 14 COVID19 Testing Management System 14 Human Metapneumovirus Testing Management System 14 Dairy Farm Shop Management System 13 Online Course Registration 13 Online Shopping Portal Project 13 Employee Record Management System 13 e-Diary Management System 12 Directory Management System 12 News Portal 11 Medical Card Generation System 11 Company Visitor Management System 11 Job Portal 11 Curfew e-Pass Management System 10 News Portal Project 9 Rail Pass Management System 9 Daily Expense Tracker System 9 User Registration & Login and User Management System 8 Maid Hiring Management System 8 Cyber Cafe Management System 8 BP Monitoring Management System 7
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-40692

    SQL injection in PHPGurukul Online Fire Reporting System

    SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via  'requestid' parameter in the endpoint '/ofrs/details.php'.

    PHPGurukul Online Fire Reporting System
  • Critical 9.3
    CVE-2025-40691

    SQL injection in PHPGurukul Online Fire Reporting System

    SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via  'todate' parameter in the endpoint '/ofrs/admin/bwdates-report-result.php'.

    PHPGurukul Online Fire Reporting System
  • Critical 9.3
    CVE-2025-40690

    SQL injection in PHPGurukul Online Fire Reporting System

    SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'teamid' parameter in the endpoint '/ofrs/admin/edit-team.php'.

    PHPGurukul Online Fire Reporting System
  • Critical 9.3
    CVE-2025-40689

    SQL injection in PHPGurukul Online Fire Reporting System

    SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via  'remark', 'status' and 'requestid' parameters in the endpoint '/ofrs/admin/request-details.php'.

    PHPGurukul Online Fire Reporting System
  • Critical 9.3
    CVE-2025-40687

    SQL injection in PHPGurukul Online Fire Reporting System

    SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via  'mobilenumber', 'teamleadname' and 'teammember' parameters in the endpoint '/ofrs/admin/add-team.php'.

    PHPGurukul Online Fire Reporting System
  • Critical 9.8
    CVE-2024-8470

    SQL injection vulnerability in Job Portal

    SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it.

    PHPGurukul Job Portal
  • Critical 9.8
    CVE-2024-8469

    SQL injection vulnerability in Job Portal

    SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it.

    PHPGurukul Job Portal
  • Critical 9.8
    CVE-2024-8468

    SQL injection vulnerability in Job Portal

    SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it.

    PHPGurukul Job Portal
  • Critical 9.8
    CVE-2024-8467

    SQL injection vulnerability in Job Portal

    SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it.

    PHPGurukul Job Portal
  • Critical 9.8
    CVE-2024-8466

    SQL injection vulnerability in Job Portal

    SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored in it.

    PHPGurukul Job Portal
  • Critical 9.8
    CVE-2024-8465 Public exploit

    SQL injection vulnerability in Job Portal

    SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it.

    PHPGurukul Job Portal
  • Critical 9.8
    CVE-2024-8464

    SQL injection vulnerability in Job Portal

    SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information stored in it.

    PHPGurukul Job Portal
  • Critical 9.9
    CVE-2024-8463

    File upload restriction bypass vulnerability in Job Portal

    File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell.

    PHPGurukul Job Portal