https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-57119.htmlhttps://patchthecve.com/cve/CVE-2025-57119.htmlSun, 05 Jul 2026 02:17:03 +0000CRITICAL 9.8: An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login functionhttps://patchthecve.com/cve/CVE-2025-57118.htmlhttps://patchthecve.com/cve/CVE-2025-57118.htmlWed, 17 Jun 2026 09:42:52 +0000CRITICAL 9.8: An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileges via the index.phphttps://patchthecve.com/cve/CVE-2025-50488.htmlhttps://patchthecve.com/cve/CVE-2025-50488.htmlSun, 05 Jul 2026 16:19:33 +0000HIGH 7.1: Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack.https://patchthecve.com/cve/CVE-2025-7601.htmlhttps://patchthecve.com/cve/CVE-2025-7601.htmlWed, 17 Jun 2026 10:05:19 +0000LOW 3.5: A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/student-history.php. The manipulation of the argument stdid leads to cross site scripting. The attack can be initiated remotely.https://patchthecve.com/cve/CVE-2025-7600.htmlhttps://patchthecve.com/cve/CVE-2025-7600.htmlWed, 17 Jun 2026 10:05:19 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0. This affects an unknown part of the file /admin/student-history.php. The manipulation of the argument stdid leads to sql injection. It is possible to initiate the attack remotely. The exphttps://patchthecve.com/cve/CVE-2025-2093.htmlhttps://patchthecve.com/cve/CVE-2025-2093.htmlWed, 17 Jun 2026 09:06:18 +0000LOW 3.1: A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number leads to weak password recovery. The atthttps://patchthecve.com/cve/CVE-2020-28130.htmlhttps://patchthecve.com/cve/CVE-2020-28130.htmlWed, 17 Jun 2026 03:10:08 +0000CRITICAL 9.8: An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos (under the web root).