Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
–

12 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaMedia (5.3)0.27%—Phpgurukul Online Birth Certificate System31/5/202517/6/2026
A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/registered-users.php. The manipulation of the argument del leads to sql injection. It is possible to launch the attack remotely. The exploit has…
AnalizadaMedia (5.3)0.27%—Phpgurukul Online Birth Certificate System31/5/202517/6/2026
A vulnerability was found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This issue affects some unknown processing of the file /admin/all-applications.php. The manipulation of the argument del leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed…
AnalizadaMedia (5.3)0.26%—Phpgurukul Online Birth Certificate System31/5/202517/6/2026
A vulnerability has been found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/users-applications.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit has been…
AnalizadaMedia (6.9)0.40%—Phpgurukul Online Birth Certificate System3/5/202517/6/2026
A vulnerability classified as critical was found in PHPGurukul Online Birth Certificate System 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/between-dates-report.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The exploit…
AnalizadaMedia (6.9)0.36%—Phpgurukul Online Birth Certificate System2/5/202517/6/2026
A vulnerability has been found in PHPGurukul Online Birth Certificate System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to…
AnalizadaMedia (6.9)0.36%—Phpgurukul Online Birth Certificate System1/5/202517/6/2026
A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0. Affected is an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. It is possible to launch the attack remotely. The exploit has been…
AnalizadaMedia (5.4)0.28%💥 PoCPhpgurukul Online Birth Certificate System3/2/202517/6/2026
A Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0 via the profile name to /user/certificate-form.php.
AnalizadaMedia (6.1)0.20%—Phpgurukul Online Birth Certificate System17/12/202417/6/2026
A stored HTML Injection vulnerability was identified in PHPGurukul Online Birth Certificate System v1.0 in /user/certificate-form.php.
AnalizadaMedia (4.3)0.24%—Phpgurukul Online Birth Certificate System17/12/202417/6/2026
An insecure direct object reference (IDOR) vulnerability was discovered in PHPGurukul Online Birth Certificate System v1.0. This vulnerability resides in the viewid parameter of /user/view-application-detail.php. Authenticated users can exploit this flaw by manipulating the viewid parameter in the URL to access…
AnalizadaMedia (5.4)0.14%—Phpgurukul Online Birth Certificate System17/12/202417/6/2026
Phpgurukul Online Birth Certificate System 1.0 suffers from insufficient password requirements which can lead to unauthorized access to user accounts.
AnalizadaMedia (5.4)0.19%—Phpgurukul Online Birth Certificate System17/12/202417/6/2026
A stored cross-site scripting (XSS) vulnerability was identified in Phpgurukul Online Birth Certificate System 1.0 in /user/certificate-form.php via the full name field.
ModificadaMedia (6.1)2.2%💥 ExploitPhpgurukul Online Birth Certificate System23/5/20229/7/2026
Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters.
Orbitaley — Vulnerabilidades