{"schema_version":1,"title":"Phpgurukul vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 35 vulnerabilities in Phpgurukul: 0 in the last 7 days and 11 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-90846, was published on 15 September 2026. 5 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/phpgurukul","json_url":"https://junglewise.ai/threats/vendors/phpgurukul.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/phpgurukul","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":18,"all_time":35,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":11,"last_90_days":11,"last_365_days":22},"latest":[{"cve":"CVE-2026-90846","cvss":7.3,"epss":0.0043,"slug":"cve-2026-90846-phpgurukul-daily-expense-tracker-sql-injection-in-password-reset","title":"PHPGurukul Daily Expense Tracker SQL injection in password reset","severity":"high","exploited":false,"published_at":"2026-09-15T01:16:54.23+00:00","url":"https://junglewise.ai/threats/cve-2026-90846-phpgurukul-daily-expense-tracker-sql-injection-in-password-reset"},{"cve":"CVE-2026-90845","cvss":3.5,"epss":0.0035,"slug":"cve-2026-90845-phpgurukul-daily-expense-tracker-system-stored-cross-site","title":"PHPGurukul Daily Expense Tracker System stored cross-site scripting","severity":"low","exploited":false,"published_at":"2026-09-15T01:16:54.03+00:00","url":"https://junglewise.ai/threats/cve-2026-90845-phpgurukul-daily-expense-tracker-system-stored-cross-site"},{"cve":"CVE-2026-90844","cvss":7.3,"epss":0.0043,"slug":"cve-2026-90844-phpgurukul-daily-expense-tracker-system-sql-injection-in-login","title":"PHPGurukul Daily Expense Tracker System SQL injection in login","severity":"high","exploited":false,"published_at":"2026-09-15T01:16:53.833+00:00","url":"https://junglewise.ai/threats/cve-2026-90844-phpgurukul-daily-expense-tracker-system-sql-injection-in-login"},{"cve":"CVE-2026-90842","cvss":3.7,"epss":0.0031,"slug":"cve-2026-90842-phpgurukul-blood-donor-management-system-cleartext-password","title":"PHPGurukul Blood Donor Management System cleartext password storage","severity":"low","exploited":false,"published_at":"2026-09-15T00:17:31.337+00:00","url":"https://junglewise.ai/threats/cve-2026-90842-phpgurukul-blood-donor-management-system-cleartext-password"},{"cve":"CVE-2026-90841","cvss":7.3,"epss":0.0043,"slug":"cve-2026-90841-phpgurukul-blood-donor-management-system-sql-injection-in-report","title":"PHPGurukul Blood Donor Management System SQL injection in Report endpoint","severity":"high","exploited":false,"published_at":"2026-09-15T00:17:31.14+00:00","url":"https://junglewise.ai/threats/cve-2026-90841-phpgurukul-blood-donor-management-system-sql-injection-in-report"},{"cve":"CVE-2026-90840","cvss":7.3,"epss":0.0069,"slug":"cve-2026-90840-phpgurukul-blood-donor-management-system-authentication-bypass-in","title":"PHPGurukul Blood Donor Management System authentication bypass in admin controllers","severity":"high","exploited":false,"published_at":"2026-09-15T00:17:30.957+00:00","url":"https://junglewise.ai/threats/cve-2026-90840-phpgurukul-blood-donor-management-system-authentication-bypass-in"},{"cve":"CVE-2026-90575","cvss":3.7,"epss":0.0048,"slug":"cve-2026-90575-phpgurukul-small-crm-insecure-deserialization-in-login-handler","title":"PHPGurukul Small CRM insecure deserialization in login handler","severity":"low","exploited":false,"published_at":"2026-09-13T18:16:50.117+00:00","url":"https://junglewise.ai/threats/cve-2026-90575-phpgurukul-small-crm-insecure-deserialization-in-login-handler"},{"cve":"CVE-2026-90519","cvss":6.3,"epss":0.0037,"slug":"cve-2026-90519-phpgurukul-bank-locker-management-system-unrestricted-file-upload","title":"PHPGurukul Bank Locker Management System unrestricted file upload","severity":"medium","exploited":false,"published_at":"2026-09-13T13:16:27.697+00:00","url":"https://junglewise.ai/threats/cve-2026-90519-phpgurukul-bank-locker-management-system-unrestricted-file-upload"},{"cve":"CVE-2026-90518","cvss":6.3,"epss":0.0037,"slug":"cve-2026-90518-phpgurukul-bank-locker-management-system-privilege-escalation","title":"PHPGurukul Bank Locker Management System privilege escalation","severity":"medium","exploited":false,"published_at":"2026-09-13T12:17:16.237+00:00","url":"https://junglewise.ai/threats/cve-2026-90518-phpgurukul-bank-locker-management-system-privilege-escalation"},{"cve":"CVE-2026-90517","cvss":5.3,"epss":0.0057,"slug":"cve-2026-90517-phpgurukul-bank-locker-management-system-authentication-bypass","title":"PHPGurukul Bank Locker Management System authentication bypass","severity":"medium","exploited":false,"published_at":"2026-09-13T12:17:16.073+00:00","url":"https://junglewise.ai/threats/cve-2026-90517-phpgurukul-bank-locker-management-system-authentication-bypass"},{"cve":"CVE-2026-82424","cvss":6.3,"epss":0.0034,"slug":"cve-2026-82424-phpgurukul-student-information-system-sql-injection","title":"PHPGurukul Student Information System SQL injection","severity":"medium","exploited":false,"published_at":"2026-08-29T23:17:24.08+00:00","url":"https://junglewise.ai/threats/cve-2026-82424-phpgurukul-student-information-system-sql-injection"},{"cve":"CVE-2026-5837","cvss":7.3,"epss":0.0026,"slug":"cve-2026-5837-phpgurukul-news-portal-project-sql-injection-in-news-details-php","title":"PHPGurukul News Portal Project SQL injection in news-details.php","severity":"high","exploited":false,"published_at":"2026-04-09T04:17:23.597+00:00","url":"https://junglewise.ai/threats/cve-2026-5837-phpgurukul-news-portal-project-sql-injection-in-news-details-php"},{"cve":"CVE-2026-5814","cvss":7.3,"epss":0.0025,"slug":"cve-2026-5814-phpgurukul-online-course-registration-sql-injection-in-check","title":"PHPGurukul Online Course Registration SQL injection in check_availability.php","severity":"high","exploited":false,"published_at":"2026-04-09T00:16:19.827+00:00","url":"https://junglewise.ai/threats/cve-2026-5814-phpgurukul-online-course-registration-sql-injection-in-check"},{"cve":"CVE-2026-5813","cvss":7.3,"epss":0.0026,"slug":"cve-2026-5813-phpgurukul-online-course-registration-sql-injection-in-check","title":"PHPGurukul Online Course Registration SQL injection in check_availability.php","severity":"high","exploited":false,"published_at":"2026-04-08T23:17:00.833+00:00","url":"https://junglewise.ai/threats/cve-2026-5813-phpgurukul-online-course-registration-sql-injection-in-check"},{"cve":"CVE-2026-5636","cvss":6.3,"epss":0.0025,"slug":"cve-2026-5636-phpgurukul-online-shopping-portal-sql-injection-in-cancelorder-php","title":"PHPGurukul Online Shopping Portal SQL injection in cancelorder.php","severity":"medium","exploited":false,"published_at":"2026-04-06T08:16:40.14+00:00","url":"https://junglewise.ai/threats/cve-2026-5636-phpgurukul-online-shopping-portal-sql-injection-in-cancelorder-php"},{"cve":"CVE-2026-5635","cvss":6.3,"epss":0.0025,"slug":"cve-2026-5635-phpgurukul-online-shopping-portal-sql-injection-in-categorywise","title":"PHPGurukul Online Shopping Portal SQL injection in categorywise-products.php","severity":"medium","exploited":false,"published_at":"2026-04-06T08:16:39.91+00:00","url":"https://junglewise.ai/threats/cve-2026-5635-phpgurukul-online-shopping-portal-sql-injection-in-categorywise"},{"cve":"CVE-2026-5606","cvss":6.3,"epss":0.0026,"slug":"cve-2026-5606-phpgurukul-online-shopping-portal-sql-injection-in-order-details","title":"PHPGurukul Online Shopping Portal SQL injection in order-details.php","severity":"medium","exploited":false,"published_at":"2026-04-06T00:16:19.42+00:00","url":"https://junglewise.ai/threats/cve-2026-5606-phpgurukul-online-shopping-portal-sql-injection-in-order-details"},{"cve":"CVE-2026-5583","cvss":6.3,"epss":0.0025,"slug":"cve-2026-5583-phpgurukul-online-shopping-portal-sql-injection-in-my-profile-php","title":"PHPGurukul Online Shopping Portal SQL injection in my-profile.php","severity":"medium","exploited":false,"published_at":"2026-04-05T17:16:57.453+00:00","url":"https://junglewise.ai/threats/cve-2026-5583-phpgurukul-online-shopping-portal-sql-injection-in-my-profile-php"},{"cve":"CVE-2026-5560","cvss":6.3,"epss":0.0025,"slug":"cve-2026-5560-phpgurukul-online-shopping-portal-sql-injection-in-payment-method","title":"PHPGurukul Online Shopping Portal SQL injection in payment-method.php","severity":"medium","exploited":false,"published_at":"2026-04-05T11:16:56.6+00:00","url":"https://junglewise.ai/threats/cve-2026-5560-phpgurukul-online-shopping-portal-sql-injection-in-payment-method"},{"cve":"CVE-2026-5558","cvss":6.3,"epss":0.0026,"slug":"cve-2026-5558-phpgurukul-online-shopping-portal-sql-injection-in-pending-orders","title":"PHPGurukul Online Shopping Portal SQL injection in pending-orders.php","severity":"medium","exploited":false,"published_at":"2026-04-05T10:16:19.933+00:00","url":"https://junglewise.ai/threats/cve-2026-5558-phpgurukul-online-shopping-portal-sql-injection-in-pending-orders"},{"cve":"CVE-2026-5552","cvss":6.3,"epss":0.0025,"slug":"cve-2026-5552-phpgurukul-online-shopping-portal-sql-injection-in-sub-category","title":"PHPGurukul Online Shopping Portal SQL injection in sub-category.php","severity":"medium","exploited":false,"published_at":"2026-04-05T09:16:18.84+00:00","url":"https://junglewise.ai/threats/cve-2026-5552-phpgurukul-online-shopping-portal-sql-injection-in-sub-category"},{"cve":"CVE-2026-5543","cvss":6.3,"epss":0.002,"slug":"cve-2026-5543-phpgurukul-user-management-system-sql-injection-in-yesterday-reg","title":"PHPGurukul User Management System SQL injection in yesterday-reg-users.php","severity":"medium","exploited":false,"published_at":"2026-04-05T05:16:04.743+00:00","url":"https://junglewise.ai/threats/cve-2026-5543-phpgurukul-user-management-system-sql-injection-in-yesterday-reg"},{"cve":"CVE-2025-57145","cvss":5.4,"epss":0.002,"slug":"cve-2025-57145-phpgurukul-atsms-stored-xss-in-search-autootaxi-php","title":"PHPGurukul ATSMS stored XSS in search-autootaxi.php","severity":"medium","exploited":false,"published_at":"2025-09-16T15:15:46.083+00:00","url":"https://junglewise.ai/threats/cve-2025-57145-phpgurukul-atsms-stored-xss-in-search-autootaxi-php"},{"cve":"CVE-2025-57119","cvss":9.8,"epss":0.0054,"slug":"cve-2025-57119-phpgurukul-online-library-management-system-privilege-escalation","title":"PHPGurukul Online Library Management System privilege escalation in adminlogin.php","severity":"critical","exploited":false,"published_at":"2025-09-16T14:15:55.787+00:00","url":"https://junglewise.ai/threats/cve-2025-57119-phpgurukul-online-library-management-system-privilege-escalation"},{"cve":"CVE-2025-50486","cvss":7.1,"epss":0.0041,"slug":"cve-2025-50486-phpgurukul-car-rental-project-improper-session-invalidation-in","title":"PHPGurukul Car Rental Project improper session invalidation in update-password.php","severity":"high","exploited":false,"published_at":"2025-07-28T20:17:47.87+00:00","url":"https://junglewise.ai/threats/cve-2025-50486-phpgurukul-car-rental-project-improper-session-invalidation-in"}],"vendor":{"hub":true,"name":"Phpgurukul","slug":"phpgurukul","homepage":"https://phpgurukul.com/","description":"A provider of PHP-based web application source code and tutorials for developers.","url":"https://junglewise.ai/threats/vendors/phpgurukul"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2025-57119","cvss":9.8,"epss":0.0054,"slug":"cve-2025-57119-phpgurukul-online-library-management-system-privilege-escalation","title":"PHPGurukul Online Library Management System privilege escalation in adminlogin.php","severity":"critical","exploited":false,"published_at":"2025-09-16T14:15:55.787+00:00","url":"https://junglewise.ai/threats/cve-2025-57119-phpgurukul-online-library-management-system-privilege-escalation"},{"cve":"CVE-2025-50489","cvss":7.5,"epss":0.0062,"slug":"cve-2025-50489-phpgurukul-student-result-management-system-session-hijacking-in","title":"PHPGurukul Student Result Management System session hijacking in change-password.php","severity":"high","exploited":false,"published_at":"2025-07-28T18:15:25.903+00:00","url":"https://junglewise.ai/threats/cve-2025-50489-phpgurukul-student-result-management-system-session-hijacking-in"},{"cve":"CVE-2025-50492","cvss":7.5,"epss":0.0055,"slug":"cve-2025-50492-phpgurukul-e-diary-management-system-improper-session","title":"PHPGurukul e-Diary Management System improper session invalidation","severity":"high","exploited":false,"published_at":"2025-07-28T18:15:26.37+00:00","url":"https://junglewise.ai/threats/cve-2025-50492-phpgurukul-e-diary-management-system-improper-session"},{"cve":"CVE-2025-50490","cvss":7.5,"epss":0.0052,"slug":"cve-2025-50490-phpgurukul-student-result-management-system-session-hijacking-in","title":"PHPGurukul Student Result Management System session hijacking in emp-changepassword.php","severity":"high","exploited":false,"published_at":"2025-07-28T17:15:31.157+00:00","url":"https://junglewise.ai/threats/cve-2025-50490-phpgurukul-student-result-management-system-session-hijacking-in"},{"cve":"CVE-2025-50494","cvss":7.5,"epss":0.005,"slug":"cve-2025-50494-phpgurukul-car-washing-management-system-session-hijacking-in","title":"PHPGurukul Car Washing Management System session hijacking in change-password.php","severity":"high","exploited":false,"published_at":"2025-07-28T17:15:31.493+00:00","url":"https://junglewise.ai/threats/cve-2025-50494-phpgurukul-car-washing-management-system-session-hijacking-in"},{"cve":"CVE-2025-50493","cvss":7.5,"epss":0.0041,"slug":"cve-2025-50493-phpgurukul-doctor-appointment-management-system-session-hijacking","title":"PHPGurukul Doctor Appointment Management System session hijacking in change-password.php","severity":"high","exploited":false,"published_at":"2025-07-28T17:15:31.337+00:00","url":"https://junglewise.ai/threats/cve-2025-50493-phpgurukul-doctor-appointment-management-system-session-hijacking"},{"cve":"CVE-2026-90840","cvss":7.3,"epss":0.0069,"slug":"cve-2026-90840-phpgurukul-blood-donor-management-system-authentication-bypass-in","title":"PHPGurukul Blood Donor Management System authentication bypass in admin controllers","severity":"high","exploited":false,"published_at":"2026-09-15T00:17:30.957+00:00","url":"https://junglewise.ai/threats/cve-2026-90840-phpgurukul-blood-donor-management-system-authentication-bypass-in"},{"cve":"CVE-2026-90846","cvss":7.3,"epss":0.0043,"slug":"cve-2026-90846-phpgurukul-daily-expense-tracker-sql-injection-in-password-reset","title":"PHPGurukul Daily Expense Tracker SQL injection in password reset","severity":"high","exploited":false,"published_at":"2026-09-15T01:16:54.23+00:00","url":"https://junglewise.ai/threats/cve-2026-90846-phpgurukul-daily-expense-tracker-sql-injection-in-password-reset"},{"cve":"CVE-2026-90844","cvss":7.3,"epss":0.0043,"slug":"cve-2026-90844-phpgurukul-daily-expense-tracker-system-sql-injection-in-login","title":"PHPGurukul Daily Expense Tracker System SQL injection in login","severity":"high","exploited":false,"published_at":"2026-09-15T01:16:53.833+00:00","url":"https://junglewise.ai/threats/cve-2026-90844-phpgurukul-daily-expense-tracker-system-sql-injection-in-login"},{"cve":"CVE-2026-90841","cvss":7.3,"epss":0.0043,"slug":"cve-2026-90841-phpgurukul-blood-donor-management-system-sql-injection-in-report","title":"PHPGurukul Blood Donor Management System SQL injection in Report endpoint","severity":"high","exploited":false,"published_at":"2026-09-15T00:17:31.14+00:00","url":"https://junglewise.ai/threats/cve-2026-90841-phpgurukul-blood-donor-management-system-sql-injection-in-report"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Phpgurukul Online Shopping Portal Project","slug":"online-shopping-portal-project","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/online-shopping-portal-project"},{"name":"Phpgurukul Bank Locker Management System","slug":"bank-locker-management-system","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/bank-locker-management-system"},{"name":"Phpgurukul Blood Donor Management System","slug":"blood-donor-management-system","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/blood-donor-management-system"},{"name":"Phpgurukul Daily Expense Tracker System","slug":"daily-expense-tracker-system","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/daily-expense-tracker-system"},{"name":"Phpgurukul Online Course Registration","slug":"online-course-registration","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/online-course-registration"}]}