SR
Product
Student Record System
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 11Medium 10Low 0
Watch
Add Student Record System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-44632 | 6.5 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php Affected: 3.20 |
| CVE-2024-44633 | 6.5 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php Affected: 3.20 |
| CVE-2024-44636 | 6.5 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php Affected: 3.20 |
| CVE-2024-44640 | 6.5 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php Affected: 3.20 |
| CVE-2024-55016 | 6.5 | Nov 14 | PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php Affected: 3.20 |
| CVE-2024-44639 | 6.5 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php Affected: 3.20 |
| CVE-2024-44630 | 6.5 | Nov 14 | Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection Affected: 3.20 |
| CVE-2024-44635 | 6.1 | Nov 14 | PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php Affected: 3.20 |
| CVE-2026-3403 | 4.8 | Mar 2 | PHPGurukul Student Record Management System edit-subject.php cross site scripting Affected: 1.0 |
| CVE-2026-3402 | 4.8 | Mar 2 | PHPGurukul Student Record Management System edit-course.php cross site scripting Affected: 1.0 |
Showing 10