CVE-2024-44635

PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting XSS via adminname and aemailid parameters in /admin-profile.php...

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

EUVD-2024-55083

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php...

EUVD-2024-55077

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php...

CVE-2024-44633

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php...

EUVD-2024-55085

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...

EUVD-2024-55081

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

EUVD-2024-55080

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

PT-2025-46971

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record Management System version 3.2.0 Description The PHPGurukul Student Record Management System version 3.2.0 is susceptible to SQL Injection. This issue affects the login.php file through the id and password parameters...

PHPGurukul Student Record System security vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from a lack of validation of the currentpassword parameter in change-password.php against an externally entered SQL statement. An attacker can exploit this vulnerability to...

PHPGurukul Student Record System security vulnerability

Student Record System is a software application. Student Record System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adminname and aemailid parameters of admin-profile.php, which can be exploited to...

CVE-2024-44635

PHPGurukul Student Record System version 3.20 is vulnerable to a Cross-Site Scripting (XSS) flaw within the /admin-profile.php file. The root cause is the lack of effective filtering and escaping of user-supplied data provided via the adminname and aemailid parameters. An attacker could exploit t...

PHPGurukul Student Record System security vulnerability

Student Record Management System is a software application. Student Record Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the id and password parameters of login.php. An attacker can exploit this...

CVE-2024-44630

The PHPGurukul Student Record System version 3.20 is vulnerable to SQL injection due to a lack of validation for external input in the register.php file. Multiple parameters are affected, including c-full, fname, mname, lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2...

CVE-2024-44633

PHPGurukul Student Record System 3.20 is vulnerable to a SQL Injection vulnerability within the change-password.php file. The root cause is a lack of proper validation for the currentpassword parameter against externally entered SQL statements. An attacker can exploit this flaw to execute illegal...

CVE-2024-55016

The PHPGurukul Student Record Management System version 3.20 is vulnerable to SQL Injection within the login.php file. The root cause is a lack of proper validation for externally entered SQL statements in the id and password parameters. An attacker could exploit this flaw to execute illegal SQL ...

PT-2025-46968

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.20 Description The Student Record System contains multiple parameters in the ‘register.php’ file that are susceptible to SQL injection. The following parameters are affected: c-full, fname, mname,...

PHPGurukul Student Record System security vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements for the id and emailid parameters in password-recovery.php. An attacker can exploit this vulnerability to...

CVE-2024-44632

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...

PHPGurukul Student Record System security vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the sub1, sub2, sub3, sub4, and course-short parameters of add-subject.php. An attacker can exploit this...