CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3771 – PHPGurukul Student Record System edit-subject.php sql injection
https://notcve.org/view.php?id=CVE-2024-3771
A vulnerability was found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this issue is some unknown functionality of the file /edit-subject.php. The manipulation of the argument sub1/sub2/sub3/sub4/udate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/Student%20Record%20System%203.20/Student%20Record%20System%20-%20SQL%20Injection%20-%204.md https://vuldb.com/?ctiid.260618 https://vuldb.com/?id.260618 https://vuldb.com/?submit.316306 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3770 – PHPGurukul Student Record System sql injection
https://notcve.org/view.php?id=CVE-2024-3770
A vulnerability has been found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage-courses.php?del=1. The manipulation of the argument del leads to sql injection. The attack can be launched remotely. • https://github.com/BurakSevben/CVEs/blob/main/Student%20Record%20System%203.20/Student%20Record%20System%20-%20SQL%20Injection%20-%203.md https://vuldb.com/?ctiid.260617 https://vuldb.com/?id.260617 https://vuldb.com/?submit.316305 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3769 – PHPGurukul Student Record System login.php sql injection
https://notcve.org/view.php?id=CVE-2024-3769
A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /login.php. The manipulation of the argument id/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/Student%20Record%20System%203.20/Student%20Record%20System%20-%20Authentication%20Bypass.md https://vuldb.com/?ctiid.260616 https://vuldb.com/?id.260616 https://vuldb.com/?submit.316302 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 6%CPEs: 1EXPL: 2CVE-2021-26764
https://notcve.org/view.php?id=CVE-2021-26764
SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php. Una vulnerabilidad de inyección SQL en PHPGurukul Student Record System versión v4.0 permite a atacantes remotos ejecutar sentencias SQL arbitrarias, por medio del parámetro id del archivo edit-std.php • https://github.com/BigTiger2020/Student-Record-System-/blob/main/README.md https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html https://phpgurukul.com https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 2%CPEs: 1EXPL: 1CVE-2021-26762
https://notcve.org/view.php?id=CVE-2021-26762
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php. Una vulnerabilidad de inyección SQL en PHPGurukul Student Record System versión 4.0, permite a atacantes remotos ejecutar sentencias SQL arbitrarias, por medio del parámetro cid del archivo edit-course.php • https://phpgurukul.com https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip https://www.exploit-db.com/exploits/49513 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •