Phpgurukul Online Library Management System vulnerabilities

CVE-2025-57119 [CRITICAL] CWE-250 CVE-2025-57119: An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function

CVE-2025-57118 [CRITICAL] CWE-269 CVE-2025-57118: An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileg An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileges via the index.php

CVE-2025-50488 [HIGH] CWE-613 CVE-2025-50488: Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Lib Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack.

CVE-2025-7600 [MEDIUM] CWE-74 CVE-2025-7600: A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0. This affects an unknown part of the file /admin/student-history.php. The manipulation of the argument stdid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-7601 [MEDIUM] CWE-79 CVE-2025-7601: A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/student-history.php. The manipulation of the argument stdid leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may b

CVE-2025-2093 [LOW] CWE-640 CVE-2025-2093: A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared a A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number leads to weak password recovery. The attack can be launched remotely. The complexity of an attac