https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-51045.htmlhttps://patchthecve.com/cve/CVE-2025-51045.htmlWed, 17 Jun 2026 09:35:30 +0000MEDIUM 6.5: Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability in the /admin/password-recovery.php file. This vulnerability is attributed to the insufficient validation of user input for the username parameter.https://patchthecve.com/cve/CVE-2025-50350.htmlhttps://patchthecve.com/cve/CVE-2025-50350.htmlWed, 17 Jun 2026 09:35:01 +0000MEDIUM 5.4: PHPGurukul Pre-School Enrollment System Project v1.0 is vulnerable to Directory Traversal in manage-classes.php.https://patchthecve.com/cve/CVE-2025-50349.htmlhttps://patchthecve.com/cve/CVE-2025-50349.htmlWed, 17 Jun 2026 09:35:01 +0000HIGH 7.5: PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-teacher-pic.php.https://patchthecve.com/cve/CVE-2025-50348.htmlhttps://patchthecve.com/cve/CVE-2025-50348.htmlWed, 17 Jun 2026 09:35:01 +0000HIGH 7.5: PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-class-pic.php.https://patchthecve.com/cve/CVE-2025-6323.htmlhttps://patchthecve.com/cve/CVE-2025-6323.htmlWed, 17 Jun 2026 10:01:37 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file /enrollment.php. The manipulation of the argument fathername leads to sql injection. It is possible to initiate the attack remotely. The exploit has https://patchthecve.com/cve/CVE-2025-6322.htmlhttps://patchthecve.com/cve/CVE-2025-6322.htmlWed, 17 Jun 2026 10:01:36 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /visit.php. The manipulation of the argument gname leads to sql injection. The attack may be launched remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2025-6321.htmlhttps://patchthecve.com/cve/CVE-2025-6321.htmlWed, 17 Jun 2026 10:01:36 +0000MEDIUM 6.3: A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument sadminusername leads to sql injection. The attack can be launchedhttps://patchthecve.com/cve/CVE-2025-6320.htmlhttps://patchthecve.com/cve/CVE-2025-6320.htmlWed, 17 Jun 2026 10:01:36 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System 1.0. Affected is an unknown function of the file /admin/add-class.php. The manipulation of the argument classname leads to sql injection. It is possible to launch the attack remotely. The exploit https://patchthecve.com/cve/CVE-2025-6319.htmlhttps://patchthecve.com/cve/CVE-2025-6319.htmlWed, 17 Jun 2026 10:01:36 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. This issue affects some unknown processing of the file /admin/add-teacher.php. The manipulation of the argument tsubject leads to sql injection. The attack may be initiated remotely. Thehttps://patchthecve.com/cve/CVE-2025-6318.htmlhttps://patchthecve.com/cve/CVE-2025-6318.htmlWed, 17 Jun 2026 10:01:36 +0000HIGH 7.3: A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. This vulnerability affects unknown code of the file /admin/check_availability.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2025-4154.htmlhttps://patchthecve.com/cve/CVE-2025-4154.htmlWed, 17 Jun 2026 09:32:37 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this issue is some unknown functionality of the file /admin/enrollment-details.php. The manipulation of the argument Status leads to sql injection. The attack may be launchedhttps://patchthecve.com/cve/CVE-2025-4111.htmlhttps://patchthecve.com/cve/CVE-2025-4111.htmlWed, 17 Jun 2026 09:32:31 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/visitor-details.php. The manipulation of the argument Status leads to sql injection. It is possible to initiate the attack remotely. The explohttps://patchthecve.com/cve/CVE-2025-4110.htmlhttps://patchthecve.com/cve/CVE-2025-4110.htmlWed, 17 Jun 2026 09:32:31 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-teacher.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be launched remotely. Thhttps://patchthecve.com/cve/CVE-2025-4109.htmlhttps://patchthecve.com/cve/CVE-2025-4109.htmlWed, 17 Jun 2026 09:32:31 +0000MEDIUM 6.3: A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-subadmin.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched https://patchthecve.com/cve/CVE-2025-4031.htmlhttps://patchthecve.com/cve/CVE-2025-4031.htmlWed, 17 Jun 2026 09:32:21 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be initiated remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-28072.htmlhttps://patchthecve.com/cve/CVE-2025-28072.htmlWed, 17 Jun 2026 09:04:31 +0000HIGH 7.5: PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php.https://patchthecve.com/cve/CVE-2025-2362.htmlhttps://patchthecve.com/cve/CVE-2025-2362.htmlWed, 17 Jun 2026 09:06:50 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The attack may be initiated remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-2090.htmlhttps://patchthecve.com/cve/CVE-2025-2090.htmlWed, 17 Jun 2026 09:06:18 +0000MEDIUM 4.7: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php of the component Sub Admin Handler. The manipulation leads to improper access controls. The attack may be launhttps://patchthecve.com/cve/CVE-2025-2088.htmlhttps://patchthecve.com/cve/CVE-2025-2088.htmlWed, 17 Jun 2026 09:06:17 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System up to 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument fullname/emailid/mobileNumber leads to sql injection. It is possible to launch the attachttps://patchthecve.com/cve/CVE-2025-1966.htmlhttps://patchthecve.com/cve/CVE-2025-1966.htmlWed, 17 Jun 2026 08:40:26 +0000HIGH 7.3: A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploithttps://patchthecve.com/cve/CVE-2024-54790.htmlhttps://patchthecve.com/cve/CVE-2024-54790.htmlWed, 17 Jun 2026 08:10:41 +0000HIGH 7.5: A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remote attackers to execute arbitrary code via the visittime parameter.https://patchthecve.com/cve/CVE-2024-54810.htmlhttps://patchthecve.com/cve/CVE-2024-54810.htmlWed, 17 Jun 2026 08:10:43 +0000CRITICAL 9.8: A SQL Injection vulnerability was found in /preschool/admin/password-recovery.php in PHPGurukul Pre-School Enrollment System Project v1.0, which allows remote attackers to execute arbitrary code via the mobileno parameter.