Vulnerabilidades do Phpgurukul Student Record System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Phpgurukul Student Record System: 11 registro(s), com versões afetadas e correções.cpe:2.3:a:phpgurukul:student_record_system
CVE-2026-3403
Média · 4.8
CWE-79 01/03/2026
PHPGurukul Student Record Management System edit-subject.php cross site scripting
A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown processing of the file /edit-subject.php. Performing a manipulation of the argument Subject 1 results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.
CVE-2026-3402
Média · 4.8
CWE-79 01/03/2026
PHPGurukul Student Record Management System edit-course.php cross site scripting
A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability affects unknown code of the file /edit-course.php. Such manipulation of the argument Course Short Name leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-63955
Alta · 7.5
CWE-352 18/11/2025
Cross-Site Request Forgery (CSRF) em Phpgurukul Student Record System
A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of Service (DoS).
CVE-2024-55016
Média · 6.5
CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php.
CVE-2024-44640
Média · 6.5
CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php.
CVE-2024-44639
Média · 6.5
CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php.
CVE-2024-44636
Média · 6.5
CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php.
CVE-2024-44635
Média · 6.1
CWE-79 14/11/2025
Cross-site Scripting (XSS) em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php.
CVE-2024-44633
Média · 6.5
CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php.
CVE-2024-44632
Média · 6.5
CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php.
CVE-2024-44630
Média · 6.5
CWE-89 14/11/2025
SQL Injection em Phpgurukul Student Record System
Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country, state, city, padd, cadd, and gender.