CVE-2025-50485
- EPSS 0.05%
- Veröffentlicht 28.07.2025 00:00:00
- Zuletzt bearbeitet 29.07.2025 21:14:49
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack.
CVE-2025-4794
- EPSS 0.28%
- Veröffentlicht 16.05.2025 18:00:13
- Zuletzt bearbeitet 21.05.2025 21:00:03
A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /news.php. The manipulation of the argument newstitle leads to sql inject...
CVE-2025-4793
- EPSS 0.28%
- Veröffentlicht 16.05.2025 18:00:10
- Zuletzt bearbeitet 21.05.2025 21:00:12
A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been classified as critical. Affected is an unknown function of the file /edit-student-profile.php. The manipulation of the argument cgpa leads to sql injection. It is pos...
CVE-2025-4773
- EPSS 0.2%
- Veröffentlicht 16.05.2025 12:31:05
- Zuletzt bearbeitet 21.05.2025 14:34:08
A vulnerability was found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/level.php. The manipulation of the argument level leads to sql injection. The a...
CVE-2025-4772
- EPSS 0.28%
- Veröffentlicht 16.05.2025 12:00:07
- Zuletzt bearbeitet 21.05.2025 20:59:39
A vulnerability has been found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/department.php. The manipulation of the argument department leads to...
CVE-2025-4771
- EPSS 0.2%
- Veröffentlicht 16.05.2025 11:31:05
- Zuletzt bearbeitet 21.05.2025 14:16:02
A vulnerability, which was classified as critical, was found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/course.php. The manipulation of the argument coursecode leads to sql injection. It is possib...
CVE-2020-12429
- EPSS 0.54%
- Veröffentlicht 28.04.2020 20:15:12
- Zuletzt bearbeitet 21.11.2024 04:59:42
Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/check_availability.php, admin/index.php, change-password.p...