Vulnerabilities (CVE)

Filtered by vendor Anujk305 Subscribe
Filtered by product Vehicle Record Management System
Total 6 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-5913 1 Anujk305 1 Vehicle Record Management System 2025-06-16 7.5 HIGH 7.3 HIGH
A vulnerability was found in PHPGurukul Vehicle Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchinputdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-44180 1 Anujk305 1 Vehicle Record Management System 2025-05-28 N/A 6.1 MEDIUM
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit-brand.php?bid={brandId}.
CVE-2025-44181 1 Anujk305 1 Vehicle Record Management System 2025-05-28 N/A 6.1 MEDIUM
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/add-brand.php via the brandname parameter.
CVE-2025-44182 1 Anujk305 1 Vehicle Record Management System 2025-05-28 N/A 6.1 MEDIUM
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum, enginenumber' in the /admin/edit-vehicle.php component. This allows attackers to execute arbitrary code.
CVE-2025-44183 1 Anujk305 1 Vehicle Record Management System 2025-05-28 N/A 6.1 MEDIUM
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the name, email, and mobile parameters.
CVE-2025-29641 1 Anujk305 1 Vehicle Record Management System 2025-04-01 N/A 7.3 HIGH
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to SQL Injection in /index.php via the 'searchinputdata' parameter.