SR
Product
Student Record System
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 11Medium 10Low 0
Watch
Add Student Record System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-5216 | 9.8 | May 27 | PHPGurukul Student Record System login.php sql injection Affected: 3.20 |
| CVE-2025-4112 | 9.8 | Apr 30 | PHPGurukul Student Record System add-course.php sql injection Affected: 3.20 |
| CVE-2025-4108 | 9.8 | Apr 30 | PHPGurukul Student Record System add-subject.php sql injection Affected: 3.20 |
| CVE-2025-4073 | 9.8 | Apr 29 | PHPGurukul Student Record System change-password.php sql injection Affected: 3.20 |
| CVE-2025-1902 | 9.8 | Mar 4 | PHPGurukul Student Record System password-recovery.php sql injection Affected: 3.2 |
| CVE-2024-3770 | 9.8 | Apr 15 | PHPGurukul Student Record System sql injection Affected: 3.20 |
| CVE-2024-3769 | 9.8 | Apr 15 | PHPGurukul Student Record System login.php sql injection Affected: 3.20 |
| CVE-2021-26765 | 9.8 | Jul 22 | SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php Affected: 4.0 |
| CVE-2025-6915 | 8.8 | Jun 30 | PHPGurukul Student Record System register.php sql injection Affected: 3.2 |
| CVE-2025-6914 | 8.8 | Jun 30 | PHPGurukul Student Record System edit-student.php sql injection Affected: 3.2 |
| CVE-2025-6913 | 8.8 | Jun 30 | PHPGurukul Student Record System admin-profile.php sql injection Affected: 3.2 |
| CVE-2025-6912 | 8.8 | Jun 30 | PHPGurukul Student Record System manage-students.php sql injection Affected: 3.2 |
| CVE-2025-6911 | 8.8 | Jun 30 | PHPGurukul Student Record System manage-subjects.php sql injection Affected: 3.2 |
| CVE-2025-6910 | 8.8 | Jun 30 | PHPGurukul Student Record System session.php sql injection Affected: 3.2 |
| CVE-2024-3771 | 8.8 | Apr 15 | PHPGurukul Student Record System edit-subject.php sql injection Affected: 3.20 |
| CVE-2021-26764 | 8.8 | Jul 22 | SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php Affected: 4.0 |
| CVE-2021-26762 | 8.8 | Jul 22 | SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php Affected: 4.0 |
| CVE-2025-63955 | 7.5 | Nov 18 | A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated… Affected: 3.2 |
| CVE-2024-27685 | 7.1 | Jun 25 | SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname,… Affected: 3.20 |
| CVE-2024-44632 | 6.5 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php Affected: 3.20 |
| CVE-2024-44633 | 6.5 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php Affected: 3.20 |
| CVE-2024-44636 | 6.5 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php Affected: 3.20 |
| CVE-2024-44640 | 6.5 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php Affected: 3.20 |
| CVE-2024-55016 | 6.5 | Nov 14 | PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php Affected: 3.20 |
| CVE-2024-44639 | 6.5 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php Affected: 3.20 |
| CVE-2024-44630 | 6.5 | Nov 14 | Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection Affected: 3.20 |
| CVE-2024-44635 | 6.1 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php Affected: 3.20 |
| CVE-2026-3403 | 4.8 | Mar 2 | PHPGurukul Student Record Management System edit-subject.php cross site scripting Affected: 1.0 |
| CVE-2026-3402 | 4.8 | Mar 2 | PHPGurukul Student Record Management System edit-course.php cross site scripting Affected: 1.0 |
Showing 29