CVE-2025-9307

A flaw has been found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /admin/session.php. This manipulation of the argument sesssion causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2025-9307 PHPGurukul Online Course Registration session.php sql injection

A flaw has been found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /admin/session.php. This manipulation of the argument sesssion causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2025-9307

The CVE refers to PHPGurukul Online Course Registration 3.1 with a SQL injection in the /admin/session.php file, through manipulation of the sesssion argument. This vulnerability is exploitable remotely, and published exploits exist. Multiple sources (NVD, Red Hat, CNVD, CNNVD, CVE List) confirm ...

CVE-2025-9307 PHPGurukul Online Course Registration session.php sql injection

A flaw has been found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /admin/session.php. This manipulation of the argument sesssion causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

PT-2025-34245 · Unknown · Phpgurukul Online Course Registration System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Course Registration version 3.1 Description: A flaw exists in PHPGurukul Online Course Registration 3.1 related to SQL injection. The issue is located in the /admin/session.php file, specifically through manipulation of the...

Linux Distros Unpatched Vulnerability : CVE-2025-26533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An SQL injection risk was identified in the module list filter within course search. CVE-2025-26533 Note that Nessus relies on the presence of the package as...

PHPGurukul Online Course Registration SQL注入漏洞

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter sesssion. An attacker can exploit this vulnerability to execute...

Malicious code in course-config (npm)

The package course-config was found to contain malicious code...

MAL-2025-17636 Malicious code in course-config (npm)

The package course-config was found to contain malicious code...

BIT-MOODLE-2025-26533 SQL injection risk in course search module list filter

An SQL injection risk was identified in the module list filter within course search...

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

Online Course Registration Session Hijacking Vulnerability

Online Course Registration is an online course registration system. A session hijacking vulnerability exists in Online Course Registration, which stems from improper session expiration of the component /crm/change-password.php. No details of the vulnerability are available at this time...

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

PHPGurukul Online Course Registration 安全漏洞

Online Course Registration is an online course registration system. A session hijacking vulnerability exists in Online Course Registration, which stems from improper session expiration of the component /crm/change-password.php. No details of the vulnerability are available at this time...

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

CVE-2025-50582

The StudentManage student management system (version 1.0 ) developed by DayCloud contains a cross-site scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation within the Add A New Course module. This flaw could allow an attacker to execute ...

PT-2025-30096 · Unknown · Student-Manage

Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS vulnerability within the Add A New Course module. Recommendations: Address the issue in the Add A New Course module for StudentManage version 1.0...