https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-28016.htmlhttps://patchthecve.com/cve/CVE-2025-28016.htmlWed, 17 Jun 2026 09:04:27 +0000MEDIUM 4.8: A Reflected Cross-Site Scripting (XSS) vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters.https://patchthecve.com/cve/CVE-2025-8158.htmlhttps://patchthecve.com/cve/CVE-2025-8158.htmlWed, 17 Jun 2026 10:06:25 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Login and User Management System 3.3. It has been declared as critical. This vulnerability affects unknown code of the file /admin/yesterday-reg-users.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exhttps://patchthecve.com/cve/CVE-2025-8157.htmlhttps://patchthecve.com/cve/CVE-2025-8157.htmlWed, 17 Jun 2026 10:06:24 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3. It has been classified as critical. This affects an unknown part of the file /admin/lastthirtyays-reg-users.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attachttps://patchthecve.com/cve/CVE-2025-8156.htmlhttps://patchthecve.com/cve/CVE-2025-8156.htmlWed, 17 Jun 2026 10:06:24 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/lastsevendays-reg-users.php. The manipulation of the argument ID leads to sql injection. The attack may be lauhttps://patchthecve.com/cve/CVE-2025-7543.htmlhttps://patchthecve.com/cve/CVE-2025-7543.htmlWed, 17 Jun 2026 10:05:11 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3. It has been classified as critical. This affects an unknown part of the file /admin/manage-users.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack rehttps://patchthecve.com/cve/CVE-2025-7542.htmlhttps://patchthecve.com/cve/CVE-2025-7542.htmlWed, 17 Jun 2026 10:05:11 +0000HIGH 7.3: A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/user-profile.php. The manipulation of the argument uid leads to sql injection. The attack may be launchhttps://patchthecve.com/cve/CVE-2025-4934.htmlhttps://patchthecve.com/cve/CVE-2025-4934.htmlWed, 17 Jun 2026 09:34:20 +0000HIGH 7.3: A vulnerability has been found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. This vulnerability affects unknown code of the file /edit-profile.php. The manipulation of the argument Contact leads to sql injection. The attack can be initiated remotehttps://patchthecve.com/cve/CVE-2025-45949.htmlhttps://patchthecve.com/cve/CVE-2025-45949.htmlSun, 05 Jul 2026 01:21:46 +0000CRITICAL 9.8: A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and leadinghttps://patchthecve.com/cve/CVE-2025-28011.htmlhttps://patchthecve.com/cve/CVE-2025-28011.htmlWed, 17 Jun 2026 09:04:27 +0000MEDIUM 6.1: A SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration & Login and User Management System v3.3 allows remote attackers to execute arbitrary code via the currentpassword POST request parameter.https://patchthecve.com/cve/CVE-2025-28015.htmlhttps://patchthecve.com/cve/CVE-2025-28015.htmlWed, 17 Jun 2026 09:04:27 +0000MEDIUM 5.3: A HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary HTML code via the fname, lname, and contact parameters.https://patchthecve.com/cve/CVE-2025-2050.htmlhttps://patchthecve.com/cve/CVE-2025-2050.htmlWed, 17 Jun 2026 09:06:12 +0000HIGH 7.3: A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotehttps://patchthecve.com/cve/CVE-2024-11818.htmlhttps://patchthecve.com/cve/CVE-2024-11818.htmlWed, 17 Jun 2026 06:58:30 +0000HIGH 7.3: A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and User Management System 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The explohttps://patchthecve.com/cve/CVE-2024-11817.htmlhttps://patchthecve.com/cve/CVE-2024-11817.htmlWed, 17 Jun 2026 06:58:30 +0000HIGH 7.3: A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be launhttps://patchthecve.com/cve/CVE-2024-48284.htmlhttps://patchthecve.com/cve/CVE-2024-48284.htmlWed, 17 Jun 2026 07:58:23 +0000MEDIUM 4.8: A Reflected Cross-Site Scripting (XSS) vulnerability was found in the /search-result.php page of the PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary scripts via the searchkey parameter in a POST HTTP request.https://patchthecve.com/cve/CVE-2024-50843.htmlhttps://patchthecve.com/cve/CVE-2024-50843.htmlWed, 17 Jun 2026 08:05:07 +0000MEDIUM 5.3: A Directory listing issue was found in PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers attacker to access sensitive files and directories via /loginsystem/assets.https://patchthecve.com/cve/CVE-2024-48283.htmlhttps://patchthecve.com/cve/CVE-2024-48283.htmlWed, 17 Jun 2026 07:58:23 +0000CRITICAL 9.8: Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter.https://patchthecve.com/cve/CVE-2024-48282.htmlhttps://patchthecve.com/cve/CVE-2024-48282.htmlWed, 17 Jun 2026 07:58:23 +0000HIGH 7.6: A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the femail parameter in a POST HTTP request.https://patchthecve.com/cve/CVE-2024-48280.htmlhttps://patchthecve.com/cve/CVE-2024-48280.htmlWed, 17 Jun 2026 07:58:23 +0000HIGH 7.6: A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parameter in a POST HTTP request.https://patchthecve.com/cve/CVE-2024-48279.htmlhttps://patchthecve.com/cve/CVE-2024-48279.htmlWed, 17 Jun 2026 07:58:22 +0000HIGH 7.6: A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary HTML code via the searchkey parameter in a POST HTTP request.https://patchthecve.com/cve/CVE-2024-48278.htmlhttps://patchthecve.com/cve/CVE-2024-48278.htmlWed, 17 Jun 2026 07:58:22 +0000MEDIUM 5.5: Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to Cross Site Request Forgery (CSRF) via /edit-profile.php.https://patchthecve.com/cve/CVE-2024-28323.htmlhttps://patchthecve.com/cve/CVE-2024-28323.htmlWed, 17 Jun 2026 07:21:19 +0000MEDIUM 6.5: The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection atthttps://patchthecve.com/cve/CVE-2024-25202.htmlhttps://patchthecve.com/cve/CVE-2024-25202.htmlWed, 17 Jun 2026 07:15:41 +0000MEDIUM 6.1: Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and User Management System 1.0 allows attackers to run arbitrary code via the search bar.https://patchthecve.com/cve/CVE-2023-33591.htmlhttps://patchthecve.com/cve/CVE-2023-33591.htmlWed, 17 Jun 2026 06:01:57 +0000MEDIUM 6.1: User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-result.php.