CVE-2024-44639

PHPGurukul Student Record System version 3.2.0 is vulnerable to SQL Injection due to a lack of validation of externally-entered SQL statements. The flaw exists in the add-subject.php file specifically through the sub1, sub2, sub3, sub4, and course-short parameters. An attacker can exploit this to...