Phpgurukul Online Banquet Booking System vulnerabilities

9 CVEs affecting Phpgurukul Online Banquet Booking System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-7927, published 2025-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-45947, published 2025-04-28. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/change-password.php file of the My Account - Change Password component
CVE-2022-28992, published 2022-05-20. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A Cross-Site Request Forgery (CSRF) in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request.
CVE-2025-2382, published 2025-03-17. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in PHPGurukul Online Banquet Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/booking-search.php. The…
CVE-2025-7925, published 2025-07-21. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0. Affected by this issue is some unknown functionality of the file…
CVE-2025-7927, published 2025-07-21. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul Online Banquet Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/view-user-queries.php. The…
CVE-2025-2608, published 2025-03-21. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in PHPGurukul Banquet Booking System 1.2. This affects an unknown part of the file /admin/view-user-queries.php. The manipulation of the argument…
CVE-2023-5303, published 2023-09-30. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unknown function of the file /view-booking-detail.php of the component Account…
CVE-2025-7924, published 2025-07-21. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability classified as problematic was found in PHPGurukul Online Banquet Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php.…
CVE-2025-7926, published 2025-07-21. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability, which was classified as problematic, was found in PHPGurukul Online Banquet Booking System 1.0. This affects an unknown part of the file /admin/booking-search.php. The manipulation…