CVE-2024-51102

The PHPGURUKUL Student Management System using PHP and MySQL v1 is susceptible to multiple SQL injection vulnerabilities. The flaw exists in the /studentrecordms/login.php endpoint, specifically through the username and password parameters. This vulnerability allows for unauthorized database inte...

CVE-2024-51103

The PHPGURUKUL Student Management System using PHP and MySQL v1 is vulnerable to multiple SQL injection flaws at the /studentrecordms/password-recovery.php endpoint. The root cause is the improper neutralization of special elements in the emailid and id parameters. Exploitation of these vulnerabi...

CVE-2024-55270

The phpgurukul Student Management System 1.0 is vulnerable to a Blind SQL Injection due to inadequate input sanitization of the searchdata parameter. This flaw exists in the studentms/admin/search.php endpoint. An attacker could exploit this vulnerability by injecting malicious SQL queries to gai...