Phpgurukul Student Record System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Phpgurukul Student Record System: 11 record(s), with affected versions and fixes.cpe:2.3:a:phpgurukul:student_record_system
CVE-2026-3403
Medium · 4.8
CWE-79 Mar 1, 2026
PHPGurukul Student Record Management System edit-subject.php cross site scripting
A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown processing of the file /edit-subject.php. Performing a manipulation of the argument Subject 1 results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.
CVE-2026-3402
Medium · 4.8
CWE-79 Mar 1, 2026
PHPGurukul Student Record Management System edit-course.php cross site scripting
A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability affects unknown code of the file /edit-course.php. Such manipulation of the argument Course Short Name leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-63955
High · 7.5
CWE-352 Nov 18, 2025
Cross-Site Request Forgery (CSRF) in Phpgurukul Student Record System
A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of Service (DoS).
CVE-2024-55016
Medium · 6.5
CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php.
CVE-2024-44640
Medium · 6.5
CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php.
CVE-2024-44639
Medium · 6.5
CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php.
CVE-2024-44636
Medium · 6.5
CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php.
CVE-2024-44635
Medium · 6.1
CWE-79 Nov 14, 2025
Cross-site Scripting (XSS) in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php.
CVE-2024-44633
Medium · 6.5
CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php.
CVE-2024-44632
Medium · 6.5
CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php.
CVE-2024-44630
Medium · 6.5
CWE-89 Nov 14, 2025
SQL Injection in Phpgurukul Student Record System
Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country, state, city, padd, cadd, and gender.