Filtered by vendor Phpgurukul
Subscribe
Filtered by product Vehicle Parking Management System
Subscribe
Total
7 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2025-4702 | 1 Phpgurukul | 1 Vehicle Parking Management System | 2025-05-28 | 7.5 HIGH | 7.3 HIGH |
A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Affected is an unknown function of the file /admin/add-category.php. The manipulation of the argument catename leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. | |||||
CVE-2025-4703 | 1 Phpgurukul | 1 Vehicle Parking Management System | 2025-05-28 | 7.5 HIGH | 7.3 HIGH |
A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. | |||||
CVE-2025-4704 | 1 Phpgurukul | 1 Vehicle Parking Management System | 2025-05-28 | 7.5 HIGH | 7.3 HIGH |
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. | |||||
CVE-2025-4705 | 1 Phpgurukul | 1 Vehicle Parking Management System | 2025-05-28 | 7.5 HIGH | 7.3 HIGH |
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This affects an unknown part of the file /admin/view-incomingvehicle-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. | |||||
CVE-2025-45885 | 1 Phpgurukul | 1 Vehicle Parking Management System | 2025-05-28 | N/A | 9.8 CRITICAL |
PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries. | |||||
CVE-2024-53364 | 1 Phpgurukul | 1 Vehicle Parking Management System | 2025-04-07 | N/A | 5.4 MEDIUM |
A SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/view-detail.php. This vulnerability affects the viewid parameter, where improper input sanitization allows attackers to inject malicious SQL queries. | |||||
CVE-2024-53365 | 1 Phpgurukul | 1 Vehicle Parking Management System | 2025-03-27 | N/A | 5.4 MEDIUM |
A stored cross-site scripting (XSS) vulnerability was identified in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/profile.php. This vulnerability allows authenticated users to inject malicious XSS scripts into the profile name field. |