https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-46335.htmlhttps://patchthecve.com/cve/CVE-2024-46335.htmlWed, 17 Jun 2026 07:55:18 +0000MEDIUM 4.6: PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the fromdate and todate parameters in between-date-userreport.php.https://patchthecve.com/cve/CVE-2024-44658.htmlhttps://patchthecve.com/cve/CVE-2024-44658.htmlWed, 17 Jun 2026 07:52:59 +0000MEDIUM 6.5: PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php.https://patchthecve.com/cve/CVE-2024-44655.htmlhttps://patchthecve.com/cve/CVE-2024-44655.htmlWed, 17 Jun 2026 07:52:59 +0000MEDIUM 6.1: PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the search parameter in user-search.php.https://patchthecve.com/cve/CVE-2024-44654.htmlhttps://patchthecve.com/cve/CVE-2024-44654.htmlWed, 17 Jun 2026 07:52:59 +0000MEDIUM 6.5: PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php.https://patchthecve.com/cve/CVE-2024-44657.htmlhttps://patchthecve.com/cve/CVE-2024-44657.htmlWed, 17 Jun 2026 07:52:59 +0000MEDIUM 6.5: PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php.https://patchthecve.com/cve/CVE-2025-57151.htmlhttps://patchthecve.com/cve/CVE-2025-57151.htmlWed, 17 Jun 2026 09:42:54 +0000HIGH 8.8: phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the fullname parameter.https://patchthecve.com/cve/CVE-2025-57150.htmlhttps://patchthecve.com/cve/CVE-2025-57150.htmlWed, 17 Jun 2026 09:42:54 +0000HIGH 7.2: phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/subcategory.php via the categoryName parameter.https://patchthecve.com/cve/CVE-2025-57149.htmlhttps://patchthecve.com/cve/CVE-2025-57149.htmlWed, 17 Jun 2026 09:42:53 +0000MEDIUM 6.5: phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter.https://patchthecve.com/cve/CVE-2025-57147.htmlhttps://patchthecve.com/cve/CVE-2025-57147.htmlWed, 17 Jun 2026 09:42:53 +0000HIGH 7.5: A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack of input validation of multiple parameters including fullname, email, and contactno in user/registration.php.https://patchthecve.com/cve/CVE-2025-57146.htmlhttps://patchthecve.com/cve/CVE-2025-57146.htmlWed, 17 Jun 2026 09:42:53 +0000HIGH 8.1: phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter.https://patchthecve.com/cve/CVE-2025-7802.htmlhttps://patchthecve.com/cve/CVE-2025-7802.htmlWed, 17 Jun 2026 10:05:41 +0000LOW 3.5: A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/complaint-search.php. The manipulation of the argument Search leads to cross site scripting. The attack may be launched remothttps://patchthecve.com/cve/CVE-2025-7123.htmlhttps://patchthecve.com/cve/CVE-2025-7123.htmlWed, 17 Jun 2026 10:04:19 +0000MEDIUM 4.7: A vulnerability was found in Campcodes Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/complaint-details.php. The manipulation of the argument cid/uid leads to sql injection. The attack may be initiated remotely. The explohttps://patchthecve.com/cve/CVE-2025-7122.htmlhttps://patchthecve.com/cve/CVE-2025-7122.htmlWed, 17 Jun 2026 10:04:19 +0000HIGH 7.3: A vulnerability was found in Campcodes Complaint Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has beenhttps://patchthecve.com/cve/CVE-2025-7121.htmlhttps://patchthecve.com/cve/CVE-2025-7121.htmlWed, 17 Jun 2026 10:04:18 +0000MEDIUM 6.3: A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of the file /users/complaint-details.php. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely. The exploit https://patchthecve.com/cve/CVE-2025-7120.htmlhttps://patchthecve.com/cve/CVE-2025-7120.htmlWed, 17 Jun 2026 10:04:18 +0000HIGH 7.3: A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /users/check_availability.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The ehttps://patchthecve.com/cve/CVE-2025-7119.htmlhttps://patchthecve.com/cve/CVE-2025-7119.htmlWed, 17 Jun 2026 10:04:18 +0000HIGH 7.3: A vulnerability has been found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /users/index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The https://patchthecve.com/cve/CVE-2025-5660.htmlhttps://patchthecve.com/cve/CVE-2025-5660.htmlWed, 17 Jun 2026 09:48:29 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 2.0. Affected by this issue is some unknown functionality of the file /user/register-complaint.php. The manipulation of the argument noc leads to sql injection. The attack may be launched remohttps://patchthecve.com/cve/CVE-2025-5659.htmlhttps://patchthecve.com/cve/CVE-2025-5659.htmlWed, 17 Jun 2026 09:48:29 +0000MEDIUM 6.3: A vulnerability classified as critical was found in PHPGurukul Complaint Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /user/profile.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched remotely. The exploit https://patchthecve.com/cve/CVE-2025-5658.htmlhttps://patchthecve.com/cve/CVE-2025-5658.htmlWed, 17 Jun 2026 09:48:29 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/updatecomplaint.php. The manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2025-5657.htmlhttps://patchthecve.com/cve/CVE-2025-5657.htmlWed, 17 Jun 2026 09:48:29 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/manage-users.php. The manipulation of the argument uid leads to sql injection. The attack may be initiated remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2025-5656.htmlhttps://patchthecve.com/cve/CVE-2025-5656.htmlWed, 17 Jun 2026 09:48:29 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-category.php. The manipulation of the argument description leads to sql injection. The attack can be initiated remotely. The explhttps://patchthecve.com/cve/CVE-2025-5655.htmlhttps://patchthecve.com/cve/CVE-2025-5655.htmlWed, 17 Jun 2026 09:48:29 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument subcategory leads to sql injection. It is possible to initiate the attack remotely. The https://patchthecve.com/cve/CVE-2025-5654.htmlhttps://patchthecve.com/cve/CVE-2025-5654.htmlWed, 17 Jun 2026 09:48:28 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-state.php. The manipulation of the argument description leads to sql injection. The attack may be launched remotely. The exhttps://patchthecve.com/cve/CVE-2025-5653.htmlhttps://patchthecve.com/cve/CVE-2025-5653.htmlWed, 17 Jun 2026 09:48:28 +0000MEDIUM 6.3: A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/between-date-userreport.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can https://patchthecve.com/cve/CVE-2025-5652.htmlhttps://patchthecve.com/cve/CVE-2025-5652.htmlWed, 17 Jun 2026 09:48:28 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/between-date-complaintreport.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attachttps://patchthecve.com/cve/CVE-2025-4761.htmlhttps://patchthecve.com/cve/CVE-2025-4761.htmlWed, 17 Jun 2026 09:33:57 +0000HIGH 7.3: A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The explohttps://patchthecve.com/cve/CVE-2024-56889.htmlhttps://patchthecve.com/cve/CVE-2024-56889.htmlWed, 17 Jun 2026 08:13:03 +0000HIGH 7.5: Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter.https://patchthecve.com/cve/CVE-2024-55507.htmlhttps://patchthecve.com/cve/CVE-2024-55507.htmlWed, 17 Jun 2026 08:11:10 +0000CRITICAL 9.8: An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component.https://patchthecve.com/cve/CVE-2024-13004.htmlhttps://patchthecve.com/cve/CVE-2024-13004.htmlWed, 17 Jun 2026 07:00:57 +0000HIGH 7.3: A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclhttps://patchthecve.com/cve/CVE-2024-12977.htmlhttps://patchthecve.com/cve/CVE-2024-12977.htmlWed, 17 Jun 2026 07:00:53 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/state.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2024-55509.htmlhttps://patchthecve.com/cve/CVE-2024-55509.htmlWed, 17 Jun 2026 08:11:10 +0000CRITICAL 9.8: SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component.https://patchthecve.com/cve/CVE-2024-55506.htmlhttps://patchthecve.com/cve/CVE-2024-55506.htmlWed, 17 Jun 2026 08:11:10 +0000HIGH 8.8: An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter.https://patchthecve.com/cve/CVE-2024-55505.htmlhttps://patchthecve.com/cve/CVE-2024-55505.htmlWed, 17 Jun 2026 08:11:10 +0000HIGH 8.8: An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component.https://patchthecve.com/cve/CVE-2024-12230.htmlhttps://patchthecve.com/cve/CVE-2024-12230.htmlWed, 17 Jun 2026 06:59:17 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/subcategory.php. The manipulation of the argument category leads to sql injection. The attack may be launched remothttps://patchthecve.com/cve/CVE-2024-12229.htmlhttps://patchthecve.com/cve/CVE-2024-12229.htmlWed, 17 Jun 2026 06:59:17 +0000HIGH 7.3: A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/complaint-search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. Thehttps://patchthecve.com/cve/CVE-2024-12228.htmlhttps://patchthecve.com/cve/CVE-2024-12228.htmlWed, 17 Jun 2026 06:59:17 +0000HIGH 7.3: A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. Affected is an unknown function of the file /admin/user-search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The exploit has been https://patchthecve.com/cve/CVE-2024-11967.htmlhttps://patchthecve.com/cve/CVE-2024-11967.htmlWed, 17 Jun 2026 06:58:47 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Complaint Management system 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/reset-password.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploithttps://patchthecve.com/cve/CVE-2024-11966.htmlhttps://patchthecve.com/cve/CVE-2024-11966.htmlWed, 17 Jun 2026 06:58:47 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Complaint Management system 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2024-11965.htmlhttps://patchthecve.com/cve/CVE-2024-11965.htmlWed, 17 Jun 2026 06:58:47 +0000HIGH 7.3: A vulnerability has been found in PHPGurukul Complaint Management system 1.0 and classified as critical. This vulnerability affects unknown code of the file /user/reset-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2024-11964.htmlhttps://patchthecve.com/cve/CVE-2024-11964.htmlWed, 17 Jun 2026 06:58:47 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management system 1.0. This affects an unknown part of the file /user/index.php. The manipulation of the argument emailid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been