CVE-2023-48722

CVE-2023-48722 affects the “Student Result Management System v1.0.” The vulnerability is described as multiple unauthenticated SQL injection flaws in the add_results.php resource, caused by failure to validate the characters in the class_name parameter, which is sent unfiltered to the database. D...

CVE-2025-5599

CVE-2025-5599 affects PHPGurukul Student Result Management System 1.3. The vulnerability resides in /editmyexp.php where manipulation of the emp1ctc parameter enables SQL injection. The issue can be exploited remotely and has public disclosure. Impact is described as high for confidentiality, int...

CVE-2023-48720

CVE-2023-48720 affects the Student Result Management System v1.0 . The vulnerability is multiple unauthenticated SQL injection in the login.php resource, where the password parameter is not validated and is passed unfiltered to the database. This leads to potential disclosure, modification, or da...

CVE-2025-7534

CVE-2025-7534 affects PHPGurukul Student Result Management System 2.0, specifically the GET Parameter Handler in /notice-details.php where the nid parameter is not properly sanitized, allowing SQL injection. The vulnerability enables remote exploitation and has had exploits disclosed publicly. Mu...

CVE-2023-48718

The CVE-2023-48718 entry affects Student Result Management System v1.0, with unauthenticated SQL Injection via the add_students.php resource where the class_name parameter is not validated before sending to the database. Root cause: unsanitized user input reaching SQL queries. Impact: high (per C...

CVE-2025-50489

The PHPGurukul Student Result Management System v2.0 is vulnerable to a session hijacking attack due to improper session invalidation within the /srms/change-password.php component. An attacker could exploit this flaw to hijack active sessions. Remediation involves applying updates to address the...

CVE-2025-50490

The PHPGurukul Student Result Management System v2.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /elms/emp-changepassword.php component. This flaw allows attackers to hijack active sessions, potentially gaining unauthorized access to the system. While s...

CVE-2025-56710

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Profile Page of PHPGurukul Student-Result-Management-System-Using-PHP-V2.0 . The flaw is caused by inadequate validation of requests from trusted users, allowing an attacker to craft a malicious HTML page that tricks authenticated us...