PHPGurukul vulnerabilities
We track 653 vulnerabilities in PHPGurukul products across 60+ products. 653 are rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
Latest PHPGurukul vulnerabilities
- 9.8 Critical severity
Art Gallery Management System: Improper Neutralization of Special Elements used in an SQL Command
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login.
- 9.1 Critical severity
Employee Leaves Management System: Weak Password Requirements
A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmp
- 9.8 Critical severity
Bank Locker Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql
- 7.2 High severity
Zoo Management System: Unrestricted Upload of File with Dangerous Type
Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" file of the "Events" module in the background management system.
- 7.2 High severity
Zoo Management System: Unrestricted Upload of File with Dangerous Type
Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_animal" file of the "Animals" module in the background management system.
- 7.2 High severity
Zoo Management System: Unrestricted Upload of File with Dangerous Type
In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system.
- 9.8 Critical severity
Bus Pass Management System: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php, buspassms/admin/changeimage.php, buspassms/admin/search-pass.php, buspassms/admin/edit-category-detail.ph
- 9.8 Critical severity
Cyber Cafe Management System: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication.
- 9.8 Critical severity
Dairy Farm Shop Management System: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows attackers to bypass authentication.
- 9.8 Critical severity
Directory Management System: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication.
- 9.8 Critical severity
Zoo Management System: Unrestricted Upload of File with Dangerous Type
Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
- 7.5 High severity
Hospital Management System: Improper Neutralization of Special Elements used in an SQL Command
Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/contact.php via the txtMsg parameters.
- 9.8 Critical severity
Hospital Management System: Improper Neutralization of Special Elements used in an SQL Command
Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter.