By Month

Oct 2026
Sept 2026
Aug 2026
Jul 2026
Dec 2025
Apr 2024
Mar 2024
Older Announcements...
View RSS Feed

  By Month

  Support

My Support Tickets
Announcements
Knowledgebase
Downloads
Network Status
Open Ticket

Announcements

CVE-2026-102427 (matched: php)

  • 2nd October 2026
Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing (task=getContent), a task with no authentication or ACL check anywhere in the dispatch chain. The handler validates the uploaded file’s content with a real ...
Continue reading

CVE-2025-13247 (matched: php)

  • 2nd October 2026
A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for ...
Continue reading

CVE-2025-40690 (matched: php)

  • 2nd October 2026

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'teamid' parameter in the endpoint '/ofrs/admin/edit-team.php'.

Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2025-40690

Continue reading

CVE-2025-10079 (matched: php)

  • 2nd October 2026
A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.Source: NVD (National Vulnerability Database) — ...
Continue reading

  Support

My Support Tickets
Announcements
Knowledgebase
Downloads
Network Status
Open Ticket