CVE-2025-1902

PHPGurukul Student Record System 3.2 contains a SQL injection vulnerability in password-recovery.php, caused by improper handling of the emailid parameter. The vulnerability can be exploited remotely and is publicly disclosed, affecting unknown code paths in /password-recovery.php. Multiple conne...