Phpgurukul Billing System vulnerabilities

2 CVEs affecting Phpgurukul Billing System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-65380, published 2025-12-02.

More from Phpgurukul.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-65380, published 2025-12-02. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly…
• CVE-2025-65379, published 2025-12-02. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and mobileno parameters accepts unvalidated user input, which is…