CVE-2024-48744

CVE-2024-48744 affects PHPGurukul Teachers Record Management System v2.1. A reflected Cross-Site Scripting (XSS) vulnerability exists in the /trms/listed-teachers.php endpoint (and variant listed- teachers.php) where an attacker can supply input via the POST parameter “searchinput” to trigger cod...

CVE-2021-28423

CVE-2021-28423 affects Teachers Record Management System 1.0 through 2.1, with SQL injection via editid (in edit-subjects-detail.php, edit-teacher-detail.php) and searchdata (in search.php). The root cause is improper handling of user-supplied input leading to arbitrary SQL execution by remote au...

CVE-2021-26822

CVE-2021-26822 affects Teachers Record Management System 1.0. Affected component: search-teacher.php, vulnerable via the SQL injection-prone POST parameter searchteacher. Root cause: improper input handling leading to SQL injection that can leak data and enable code execution as described in mult...

CVE-2021-28424

CVE-2021-28424 corresponds to a stored XSS in the open-source Teachers Record Management System 1.0. The vulnerability is triggered via the email field submitted to adminprofile.php, requiring remote authentication to exploit. The affected component is the Teachers Record Management System, versi...

CVE-2024-51064

CVE-2024-51064 affects Phpgurukul Teachers Record Management System v2.1. The vulnerability is an SQL Injection via the tid parameter to admin/queries.php, with CVSSv3.1 base score 9.8 (CRITICAL) and impact on confidentiality, integrity, and availability. No remediation details are provided in th...

CVE-2024-51063

Summary: Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php through the mobile number or email parameter. The issue is reported across multiple feeds and aligned with a high-impact CVSS profile (CVSS 3.1: 9.1, CRITICAL; Confidentiality and Integrit...

CVE-2025-8951

PHPGurukul Teachers Record Management System 2.1 is affected by a SQL injection in /admin/search.php arising from manipulation of the searchdata parameter in an unknown function. Attacks can be launched remotely and exploits have been publicly disclosed. As a temporary mitigation, restrict access...

CVE-2025-6885

CVE-2025-6885 affects PHPGurukul Teachers Record Management System 2.1. The vulnerability is in /admin/edit-teacher-detail.php where modifying the tid parameter leads to SQL injection. Public disclosure and remote exploitation are indicated. Reported impact is high/critical depending on source, w...

CVE-2025-6888

CVE-2025-6888 affects PHPGurukul Teachers Record Management System v2.1, specifically the /admin/changeimage.php file. The vulnerability is a SQL injection via the tid parameter, described as exploitable remotely and widely disclosed. Several sources confirm impact on the changeimage.php endpoint...