« Volver al listado

Phpgurukul

Phpgurukul E-diary Management System: vulnerabilidades y CVE

Phpgurukul E-diary Management System tiene 15 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE15
Últimos 12 meses0
Críticas0
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2025-50486Alta (7.1)0.33%—28 jul 2025
Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack.
CVE-2025-50492Alta (7.5)0.43%—28 jul 2025
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack.
CVE-2025-4509Media (6.9)0.51%—10 may 2025
A vulnerability, which was classified as critical, has been found in PHPGurukul e-Diary Management System 1.0. This issue affects some unknown processing of the file /manage-notes.php. The manipulation of the argument…
CVE-2025-4508Media (6.9)0.51%—10 may 2025
A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql…
CVE-2025-4249Media (6.9)0.56%—4 may 2025
A vulnerability was found in PHPGurukul e-Diary Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage-categories.php. The manipulation of the argument…
CVE-2025-3265Media (6.9)0.60%—4 abr 2025
A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-category.php. The manipulation of the argument…
CVE-2025-3242Media (5.3)0.49%—4 abr 2025
A vulnerability has been found in PHPGurukul e-Diary Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /search-result.php. The manipulation of the argument…
CVE-2025-3220Media (6.9)0.56%—4 abr 2025
A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard.php. The manipulation of the…
CVE-2025-3217Media (6.9)0.56%—4 abr 2025
A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /registration.php. The manipulation of the argument emailid…
CVE-2025-3216Media (6.9)0.60%—4 abr 2025
A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been classified as critical. This affects an unknown part of the file /password-recovery.php. The manipulation of the argument…
CVE-2025-3213Media (6.9)0.56%—4 abr 2025
A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /view-note.php?noteid=11. The manipulation of the argument remark leads…
CVE-2025-3188Media (6.9)0.56%—4 abr 2025
A vulnerability classified as critical has been found in PHPGurukul e-Diary Management System 1.0. This affects an unknown part of the file /add-notes.php. The manipulation of the argument Category leads to sql…
CVE-2025-3187Media (6.9)0.56%—4 abr 2025
A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument…
CVE-2025-3006Media (6.9)0.56%—31 mar 2025
A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /edit-category.php?id=8. The manipulation of the argument…
CVE-2022-29004Media (6.1)2.9%—23 may 2022
Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php.

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1078.001 Default Accounts1
  2. T1190 Exploit Public-Facing Application1
  3. T1203 Exploitation for Client Execution1
  4. T1499.004 Application or System Exploitation1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Phpgurukul