CVE-2024-3771 PHPGurukul Student Record System edit-subject.php sql injection

A vulnerability was found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this issue is some unknown functionality of the file /edit-subject.php. The manipulation of the argument sub1/sub2/sub3/sub4/udate leads to sql injection. The attack may be launched remotely...

CVE-2024-3771

Affected product: PHPGurukul Student Record System 3.20. Vulnerability: SQL injection in /edit-subject.php caused by unsafely handling parameters sub1, sub2, sub3, sub4, and udate (remote exploitable). Several sources corroborate the issue and public disclosure. Impact: potential unauthorized dat...