https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-6126.htmlhttps://patchthecve.com/cve/CVE-2025-6126.htmlWed, 17 Jun 2026 10:01:12 +0000MEDIUM 4.3: A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /contact.php. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely.https://patchthecve.com/cve/CVE-2025-6125.htmlhttps://patchthecve.com/cve/CVE-2025-6125.htmlWed, 17 Jun 2026 10:01:12 +0000LOW 2.4: A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagedes leads to cross site scripting. It is possible to launch the attack remotely. The exhttps://patchthecve.com/cve/CVE-2025-5976.htmlhttps://patchthecve.com/cve/CVE-2025-5976.htmlWed, 17 Jun 2026 09:49:08 +0000LOW 3.5: A vulnerability has been found in PHPGurukul Rail Pass Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/add-pass.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The explhttps://patchthecve.com/cve/CVE-2025-5975.htmlhttps://patchthecve.com/cve/CVE-2025-5975.htmlWed, 17 Jun 2026 09:49:08 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /rpms/download-pass.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotely. https://patchthecve.com/cve/CVE-2025-4070.htmlhttps://patchthecve.com/cve/CVE-2025-4070.htmlWed, 17 Jun 2026 09:32:26 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-4039.htmlhttps://patchthecve.com/cve/CVE-2025-4039.htmlWed, 17 Jun 2026 09:32:22 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. Th