Vulnerabilidades do Phpgurukul Online Course Registration
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Phpgurukul Online Course Registration: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:phpgurukul:online_course_registration
CVE-2026-5814
Alta · 7.3
CWE-74 08/04/2026
PHPGurukul Online Course Registration check_availability.php sql injection
A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1. This issue affects some unknown processing of the file /admin/check_availability.php. The manipulation of the argument regno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-5813
Alta · 7.3
CWE-74 08/04/2026
PHPGurukul Online Course Registration check_availability.php sql injection
A weakness has been identified in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /check_availability.php. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2025-70899
Média · 6.5
CWE-352 22/01/2026
Cross-Site Request Forgery (CSRF) em Phpgurukul Online Course Registration
PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on all administrative forms. An attacker can perform unauthorized actions on behalf of authenticated administrators by tricking them into visiting a malicious webpage.
CVE-2026-0547
Alta · 8.8
CWE-434 02/01/2026
PHPGurukul Online Course Registration Student Registration edit-student-profile.php unrestricted upload
A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be launched remotely. The exploit has been made public and could be used.
CVE-2025-15406
Alta · 8.8
CWE-862 01/01/2026
PHPGurukul Online Course Registration authorization
A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used.