CVE-2024-51102

CVE-2024-51102 affects PHPGURUKUL Student Management System v1. The vulnerability is multiple SQL injection flaws in /studentrecordms/login.php exploitable via the username and password parameters, as documented across multiple sources. Impact is described indirectly via CVSS v3.1 metrics: Medium...

CVE-2024-51103

PHPGURUKUL Student Management System (PHP and MySQL, v1) is affected by multiple SQL injection vulnerabilities in /studentrecordms/password-recovery.php, exploitable via the emailid and id parameters. The issue affects the confidentiality of data (per the CVSS metrics: Confidentiality Impact HIGH...

CVE-2024-55270

The CVE-2024-55270 entry affects phpgurukul Student Management System 1.0; the vulnerability is a SQL Injection in the admin/search.php endpoint via the searchdata parameter. The underlying issue is inadequate input sanitization in studentms/admin/search.php, enabling attacker-controlled SQL exec...