https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-61255.htmlhttps://patchthecve.com/cve/CVE-2025-61255.htmlWed, 17 Jun 2026 09:50:27 +0000MEDIUM 6.1: Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting (XSS) vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML and JavaScript injection, potentially resulting in information disclosure and user redirection.https://patchthecve.com/cve/CVE-2025-50491.htmlhttps://patchthecve.com/cve/CVE-2025-50491.htmlSun, 05 Jul 2026 16:19:35 +0000HIGH 7.1: Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack.https://patchthecve.com/cve/CVE-2025-2684.htmlhttps://patchthecve.com/cve/CVE-2025-2684.htmlWed, 17 Jun 2026 09:07:26 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Bank Locker Management System 1.0. This issue affects some unknown processing of the file /search-report-details.php. The manipulation of the argument searchinput leads to sql injection. The attack may be initiated remothttps://patchthecve.com/cve/CVE-2025-2683.htmlhttps://patchthecve.com/cve/CVE-2025-2683.htmlWed, 17 Jun 2026 09:07:26 +0000HIGH 7.3: A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been discloshttps://patchthecve.com/cve/CVE-2025-2682.htmlhttps://patchthecve.com/cve/CVE-2025-2682.htmlWed, 17 Jun 2026 09:07:26 +0000HIGH 7.3: A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file /edit-subadmin.php?said=3. The manipulation of the argument mobilenumber leads to sql injection. It is possible to initiate the attack remotely. The exploithttps://patchthecve.com/cve/CVE-2025-2681.htmlhttps://patchthecve.com/cve/CVE-2025-2681.htmlWed, 17 Jun 2026 09:07:25 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /edit-locker.php?ltid=6. The manipulation of the argument lockersize leads to sql injection. The attack may be launched remotely.https://patchthecve.com/cve/CVE-2025-2680.htmlhttps://patchthecve.com/cve/CVE-2025-2680.htmlWed, 17 Jun 2026 09:07:25 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edit-assign-locker.php?ltid=1. The manipulation of the argument mobilenumber leads to sql injection. The attack can be https://patchthecve.com/cve/CVE-2025-2679.htmlhttps://patchthecve.com/cve/CVE-2025-2679.htmlWed, 17 Jun 2026 09:07:25 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /contact-us.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-2678.htmlhttps://patchthecve.com/cve/CVE-2025-2678.htmlWed, 17 Jun 2026 09:07:25 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /changeimage1.php. The manipulation of the argument editid leads to sql injection. The attack may be initiated remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2025-2677.htmlhttps://patchthecve.com/cve/CVE-2025-2677.htmlWed, 17 Jun 2026 09:07:25 +0000HIGH 7.3: A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /changeidproof.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-2676.htmlhttps://patchthecve.com/cve/CVE-2025-2676.htmlWed, 17 Jun 2026 09:07:25 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file /add-subadmin.php. The manipulation of the argument sadminusername leads to sql injection. It is possible to initiate the attack remotely. The exploihttps://patchthecve.com/cve/CVE-2025-2675.htmlhttps://patchthecve.com/cve/CVE-2025-2675.htmlWed, 17 Jun 2026 09:07:25 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Bank Locker Management System 1.0. Affected by this issue is some unknown functionality of the file /add-lockertype.php. The manipulation of the argument lockerprice leads to sql injection. The attack may be launched remhttps://patchthecve.com/cve/CVE-2025-2674.htmlhttps://patchthecve.com/cve/CVE-2025-2674.htmlWed, 17 Jun 2026 09:07:24 +0000HIGH 7.3: A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be launched remotely. The exploit hhttps://patchthecve.com/cve/CVE-2025-2663.htmlhttps://patchthecve.com/cve/CVE-2025-2663.htmlWed, 17 Jun 2026 09:07:23 +0000HIGH 7.3: A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /search-locker-details.php. The manipulation of the argument searchinput leads to sql injection. The attack can be launche