Phpgurukul Online Birth Certificate System vulnerabilities

12 CVEs affecting Phpgurukul Online Birth Certificate System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-5375, published 2025-05-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-29005, published 2022-05-23. Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a…
CVE-2025-4242, published 2025-05-03. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in PHPGurukul Online Birth Certificate System 2.0. Affected by this vulnerability is an unknown functionality of the file…
CVE-2025-4213, published 2025-05-02. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul Online Birth Certificate System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search.php. The manipulation of…
CVE-2025-4152, published 2025-05-01. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0. Affected is an unknown function of the file /admin/bwdates-reports-details.php. The…
CVE-2024-57175, published 2025-02-03. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0 via the profile name to /user/certificate-form.php.
CVE-2025-5375, published 2025-05-31. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/registered-users.php. The…
CVE-2025-5374, published 2025-05-31. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This issue affects some unknown processing of the file /admin/all-applications.php. The…
CVE-2025-5373, published 2025-05-31. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/users-applications.php. The…
CVE-2024-55058, published 2024-12-17. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. An insecure direct object reference (IDOR) vulnerability was discovered in PHPGurukul Online Birth Certificate System v1.0. This vulnerability resides in the viewid parameter of…
CVE-2024-55059, published 2024-12-17. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A stored HTML Injection vulnerability was identified in PHPGurukul Online Birth Certificate System v1.0 in /user/certificate-form.php.

Latest

CVE-2024-55057, published 2024-12-17. Medium severity, CVSS 5.4. EPSS: 0.1% chance of exploitation in the next 30 days. Phpgurukul Online Birth Certificate System 1.0 suffers from insufficient password requirements which can lead to unauthorized access to user accounts.