Lucene search
+L

8 matches found

CNVD
CNVD
•added 2025/11/18 12:00 a.m.•19 views

Student Record System add-course.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the course-short, course-full, and cdate parameters in add-course.php. An attacker can exploit this...

6.5CVSS6.2AI score0.00258EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/15 12:47 a.m.•34 views

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/11/14 4:15 p.m.•17 views

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References2
NVD
NVD
•added 2025/11/14 4:15 p.m.•19 views

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS0.00258EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/14 12:00 a.m.•36 views

CVE-2024-44640

The PHPGurukul Student Record System 3.20 is vulnerable to a SQL Injection flaw within the add-course.php file. The root cause is a lack of proper validation and sanitization of externally entered SQL statements for the course-short , course-full , and cdate parameters. An attacker can exploit th...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•10 views

CVE-2024-44640: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/14 12:00 a.m.•20 views

PT-2025-46970

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.2.0 Description The software contains a SQL Injection flaw through the course-short, course-full, and cdate parameters in the 'add-course.php' file. This allows for potential unauthorized database...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/06/25 12:00 a.m.•30 views

PHPGurukul Student Record system: PHP and MySQL SQL injection vulnerabilities

Student Record system Using PHP and MySQL is a student record system based on php and mysql. A SQL injection vulnerability exists in Student Record system Using PHP and MySQL, which stems from the lack of validation of externally entered SQL statements for variables $cshortname, $cfullname, and...

7.1CVSS6.2AI score0.00322EPSS
SaveExploits0References4
Rows per page
Query Builder