# Phpgurukul vulnerabilities Source: https://junglewise.ai/threats/vendors/phpgurukul Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 10 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/phpgurukul.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 77 vulnerabilities in Phpgurukul: 0 in the last 7 days and 12 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-105703, was published on 6 October 2026. Nothing in the last four weeks, down from 7 vulnerabilities in the four before. 11 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 12 - All time: 77 (2 critical, 0 exploited in the wild) ## About Phpgurukul A provider of PHP-based web application source code and tutorials for developers. ## Latest Phpgurukul vulnerabilities - [CVE-2026-105703: PHPGurukul User Registration System broken authentication in change password](https://junglewise.ai/threats/cve-2026-105703-a-vulnerability-was-determined-in-phpgurukul-user-registration) (medium, CVSS 4.7, published 6 Oct 2026) - [CVE-2026-90846: PHPGurukul Daily Expense Tracker SQL injection in password reset](https://junglewise.ai/threats/cve-2026-90846-phpgurukul-daily-expense-tracker-sql-injection-in-password-reset) (high, CVSS 7.3, published 15 Sep 2026) - [CVE-2026-90845: PHPGurukul Daily Expense Tracker System stored cross-site scripting](https://junglewise.ai/threats/cve-2026-90845-phpgurukul-daily-expense-tracker-system-stored-cross-site) (low, CVSS 3.5, published 15 Sep 2026) - [CVE-2026-90844: PHPGurukul Daily Expense Tracker System SQL injection in login](https://junglewise.ai/threats/cve-2026-90844-phpgurukul-daily-expense-tracker-system-sql-injection-in-login) (high, CVSS 7.3, published 15 Sep 2026) - [CVE-2026-90842: PHPGurukul Blood Donor Management System cleartext password storage](https://junglewise.ai/threats/cve-2026-90842-phpgurukul-blood-donor-management-system-cleartext-password) (low, CVSS 3.7, published 15 Sep 2026) - [CVE-2026-90841: PHPGurukul Blood Donor Management System SQL injection in Report endpoint](https://junglewise.ai/threats/cve-2026-90841-phpgurukul-blood-donor-management-system-sql-injection-in-report) (high, CVSS 7.3, published 15 Sep 2026) - [CVE-2026-90840: PHPGurukul Blood Donor Management System authentication bypass in admin controllers](https://junglewise.ai/threats/cve-2026-90840-phpgurukul-blood-donor-management-system-authentication-bypass-in) (high, CVSS 7.3, published 15 Sep 2026) - [CVE-2026-90575: PHPGurukul Small CRM insecure deserialization in login handler](https://junglewise.ai/threats/cve-2026-90575-phpgurukul-small-crm-insecure-deserialization-in-login-handler) (low, CVSS 3.7, published 13 Sep 2026) - [CVE-2026-90519: PHPGurukul Bank Locker Management System unrestricted file upload](https://junglewise.ai/threats/cve-2026-90519-phpgurukul-bank-locker-management-system-unrestricted-file-upload) (medium, CVSS 6.3, published 13 Sep 2026) - [CVE-2026-90518: PHPGurukul Bank Locker Management System privilege escalation](https://junglewise.ai/threats/cve-2026-90518-phpgurukul-bank-locker-management-system-privilege-escalation) (medium, CVSS 6.3, published 13 Sep 2026) - [CVE-2026-90517: PHPGurukul Bank Locker Management System authentication bypass](https://junglewise.ai/threats/cve-2026-90517-phpgurukul-bank-locker-management-system-authentication-bypass) (medium, CVSS 5.3, published 13 Sep 2026) - [CVE-2026-82424: PHPGurukul Student Information System SQL injection](https://junglewise.ai/threats/cve-2026-82424-phpgurukul-student-information-system-sql-injection) (medium, CVSS 6.3, published 29 Aug 2026) - [CVE-2026-5837: PHPGurukul News Portal Project SQL injection in news-details.php](https://junglewise.ai/threats/cve-2026-5837-phpgurukul-news-portal-project-sql-injection-in-news-details-php) (high, CVSS 7.3, published 9 Apr 2026) - [CVE-2026-5814: PHPGurukul Online Course Registration SQL injection in check_availability.php](https://junglewise.ai/threats/cve-2026-5814-phpgurukul-online-course-registration-sql-injection-in-check) (high, CVSS 7.3, published 9 Apr 2026) - [CVE-2026-5813: PHPGurukul Online Course Registration SQL injection in check_availability.php](https://junglewise.ai/threats/cve-2026-5813-phpgurukul-online-course-registration-sql-injection-in-check) (high, CVSS 7.3, published 8 Apr 2026) - [CVE-2026-5636: PHPGurukul Online Shopping Portal SQL injection in cancelorder.php](https://junglewise.ai/threats/cve-2026-5636-phpgurukul-online-shopping-portal-sql-injection-in-cancelorder-php) (medium, CVSS 6.3, published 6 Apr 2026) - [CVE-2026-5635: PHPGurukul Online Shopping Portal SQL injection in categorywise-products.php](https://junglewise.ai/threats/cve-2026-5635-phpgurukul-online-shopping-portal-sql-injection-in-categorywise) (medium, CVSS 6.3, published 6 Apr 2026) - [CVE-2026-5606: PHPGurukul Online Shopping Portal SQL injection in order-details.php](https://junglewise.ai/threats/cve-2026-5606-phpgurukul-online-shopping-portal-sql-injection-in-order-details) (medium, CVSS 6.3, published 6 Apr 2026) - [CVE-2026-5583: PHPGurukul Online Shopping Portal SQL injection in my-profile.php](https://junglewise.ai/threats/cve-2026-5583-phpgurukul-online-shopping-portal-sql-injection-in-my-profile-php) (medium, CVSS 6.3, published 5 Apr 2026) - [CVE-2026-5560: PHPGurukul Online Shopping Portal SQL injection in payment-method.php](https://junglewise.ai/threats/cve-2026-5560-phpgurukul-online-shopping-portal-sql-injection-in-payment-method) (medium, CVSS 6.3, published 5 Apr 2026) - [CVE-2026-5558: PHPGurukul Online Shopping Portal SQL injection in pending-orders.php](https://junglewise.ai/threats/cve-2026-5558-phpgurukul-online-shopping-portal-sql-injection-in-pending-orders) (medium, CVSS 6.3, published 5 Apr 2026) - [CVE-2026-5552: PHPGurukul Online Shopping Portal SQL injection in sub-category.php](https://junglewise.ai/threats/cve-2026-5552-phpgurukul-online-shopping-portal-sql-injection-in-sub-category) (medium, CVSS 6.3, published 5 Apr 2026) - [CVE-2026-5543: PHPGurukul User Management System SQL injection in yesterday-reg-users.php](https://junglewise.ai/threats/cve-2026-5543-phpgurukul-user-management-system-sql-injection-in-yesterday-reg) (medium, CVSS 6.3, published 5 Apr 2026) - [CVE-2025-63611: Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the…](https://junglewise.ai/threats/cve-2025-63611-cross-site-scripting-in-phpgurukul-hostel-management-system-v2-1) (high, CVSS 8.7, published 8 Jan 2026) - [CVE-2025-15406: A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This…](https://junglewise.ai/threats/cve-2025-15406-a-flaw-has-been-found-in-phpgurukul-online-course-registration-up) (medium, CVSS 6.3, published 1 Jan 2026) ## Most severe Phpgurukul vulnerabilities - [CVE-2025-57119: PHPGurukul Online Library Management System privilege escalation in adminlogin.php](https://junglewise.ai/threats/cve-2025-57119-phpgurukul-online-library-management-system-privilege-escalation) (critical, CVSS 9.8, published 16 Sep 2025) - [CVE-2024-44659: PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.](https://junglewise.ai/threats/cve-2024-44659-phpgurukul-online-shopping-portal-2-0-is-vulnerable-to-sql) (critical, CVSS 9.8, published 17 Nov 2025) - [CVE-2025-63611: Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the…](https://junglewise.ai/threats/cve-2025-63611-cross-site-scripting-in-phpgurukul-hostel-management-system-v2-1) (high, CVSS 8.7, published 8 Jan 2026) - [CVE-2025-50489: PHPGurukul Student Result Management System session hijacking in change-password.php](https://junglewise.ai/threats/cve-2025-50489-phpgurukul-student-result-management-system-session-hijacking-in) (high, CVSS 7.5, published 28 Jul 2025) - [CVE-2025-50492: PHPGurukul e-Diary Management System improper session invalidation](https://junglewise.ai/threats/cve-2025-50492-phpgurukul-e-diary-management-system-improper-session) (high, CVSS 7.5, published 28 Jul 2025) - [CVE-2025-50490: PHPGurukul Student Result Management System session hijacking in emp-changepassword.php](https://junglewise.ai/threats/cve-2025-50490-phpgurukul-student-result-management-system-session-hijacking-in) (high, CVSS 7.5, published 28 Jul 2025) - [CVE-2025-50494: PHPGurukul Car Washing Management System session hijacking in change-password.php](https://junglewise.ai/threats/cve-2025-50494-phpgurukul-car-washing-management-system-session-hijacking-in) (high, CVSS 7.5, published 28 Jul 2025) - [CVE-2025-50493: PHPGurukul Doctor Appointment Management System session hijacking in change-password.php](https://junglewise.ai/threats/cve-2025-50493-phpgurukul-doctor-appointment-management-system-session-hijacking) (high, CVSS 7.5, published 28 Jul 2025) - [CVE-2025-63955: A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record…](https://junglewise.ai/threats/cve-2025-63955-a-cross-site-request-forgery-csrf-vulnerability-in-the-manage) (high, CVSS 7.5, published 18 Nov 2025) - [CVE-2026-90840: PHPGurukul Blood Donor Management System authentication bypass in admin controllers](https://junglewise.ai/threats/cve-2026-90840-phpgurukul-blood-donor-management-system-authentication-bypass-in) (high, CVSS 7.3, published 15 Sep 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 7 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 1 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 4 | 0 | 0 | | 14 Sep 2026 | 6 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 1 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Phpgurukul technologies - [Phpgurukul Student Record System](https://junglewise.ai/threats/technologies/student-record-system): 9 vulnerabilities - [Phpgurukul Online Shopping Portal](https://junglewise.ai/threats/technologies/online-shopping-portal): 7 vulnerabilities - [Phpgurukul Online Shopping Portal Project](https://junglewise.ai/threats/technologies/online-shopping-portal-project): 7 vulnerabilities - [Phpgurukul Small-Crm](https://junglewise.ai/threats/technologies/small-crm): 6 vulnerabilities - [Phpgurukul Complaint Management System](https://junglewise.ai/threats/technologies/phpgurukul-complaint-management-system): 5 vulnerabilities - [Phpgurukul Bank Locker Management System](https://junglewise.ai/threats/technologies/bank-locker-management-system): 4 vulnerabilities - [Phpgurukul Beauty Parlour Management System](https://junglewise.ai/threats/technologies/beauty-parlour-management-system): 4 vulnerabilities - [Phpgurukul Online Course Registration](https://junglewise.ai/threats/technologies/online-course-registration): 4 vulnerabilities - [Phpgurukul Blood Donor Management System](https://junglewise.ai/threats/technologies/blood-donor-management-system): 3 vulnerabilities - [Phpgurukul Curfew E-Pass Management System](https://junglewise.ai/threats/technologies/curfew-e-pass-management-system): 3 vulnerabilities - [Phpgurukul Daily Expense Tracker System](https://junglewise.ai/threats/technologies/daily-expense-tracker-system): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Phpgurukul vulnerabilities", https://junglewise.ai/threats/vendors/phpgurukul, 10 November 2026.