CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

CVE-2024-44640

The PHPGurukul Student Record System 3.20 is vulnerable to a SQL Injection flaw within the add-course.php file. The root cause is a lack of proper validation and sanitization of externally entered SQL statements for the course-short , course-full , and cdate parameters. An attacker can exploit th...