Lucene search
+L

7 matches found

CNVD
CNVD
•added 2025/11/18 12:00 a.m.•17 views

Student Record System add-course.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the course-short, course-full, and cdate parameters in add-course.php. An attacker can exploit this...

6.5CVSS8.3AI score0.0024EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/15 12:47 a.m.•29 views

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS8AI score0.0024EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/14 4:15 p.m.•17 views

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
OSV
OSV
•added 2025/11/14 4:15 p.m.•14 views

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/14 12:00 a.m.•33 views

CVE-2024-44640

The PHPGurukul Student Record System 3.20 is vulnerable to a SQL Injection flaw within the add-course.php file. The root cause is a lack of proper validation and sanitization of externally entered SQL statements for the course-short , course-full , and cdate parameters. An attacker can exploit th...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/14 12:00 a.m.•16 views

PT-2025-46970

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.2.0 Description The software contains a SQL Injection flaw through the course-short, course-full, and cdate parameters in the 'add-course.php' file. This allows for potential unauthorized database...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•4 views

CVE-2024-44640: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References1
Rows per page
Query Builder