https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-6301.htmlhttps://patchthecve.com/cve/CVE-2025-6301.htmlWed, 17 Jun 2026 10:01:34 +0000LOW 2.4: A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /admin/manage-notices.php of the component Add Notice. The manipulation of the argument Title/Description leads to cross site scripting. https://patchthecve.com/cve/CVE-2025-5639.htmlhttps://patchthecve.com/cve/CVE-2025-5639.htmlWed, 17 Jun 2026 09:48:26 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-5638.htmlhttps://patchthecve.com/cve/CVE-2025-5638.htmlWed, 17 Jun 2026 09:48:26 +0000MEDIUM 6.3: A vulnerability has been found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The ehttps://patchthecve.com/cve/CVE-2025-4906.htmlhttps://patchthecve.com/cve/CVE-2025-4906.htmlWed, 17 Jun 2026 09:34:16 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed https://patchthecve.com/cve/CVE-2025-4060.htmlhttps://patchthecve.com/cve/CVE-2025-4060.htmlWed, 17 Jun 2026 09:32:24 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /category.php. The manipulation of the argument catname leads to sql injection. The attack may be initiated remotely. The exploit has been d