Phpgurukul Billing System — known CVE vulnerabilities

Every CVE whose affected-product data names Phpgurukul Billing System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-65379 — CVSS 6.5 (medium): PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. Specifically, the username and…
• CVE-2025-65380 — CVSS 6.5 (medium): PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts…