Phpgurukul User Management System vulnerabilities

5 CVEs affecting Phpgurukul User Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-10624, published 2025-09-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-10624, published 2025-09-17. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A security flaw has been discovered in PHPGurukul User Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument emailid results in sql…
CVE-2025-10098, published 2025-09-08. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A security flaw has been discovered in PHPGurukul User Management System 1.0. Affected is an unknown function of the file /admin/edit-user-profile.php. The manipulation of the argument uid results in…
CVE-2025-9302, published 2025-08-21. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in PHPGurukul User Management System 1.0. This vulnerability affects unknown code of the file /signup.php. Such manipulation of the argument emailid leads to sql…
CVE-2024-50991, published 2024-11-11. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. A Cross Site Scripting (XSS) vulnerability was found in /ums-sp/admin/registered-users.php in PHPGurukul User Management System v1.0, which allows remote attackers to execute arbitrary code via the…
CVE-2025-9756, published 2025-09-01. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul User Management System 1.0. This impacts an unknown function of the file /admin/change-emailid.php. The manipulation of the argument uid results in sql…