{"id":7419,"date":"2025-06-30T12:13:33","date_gmt":"2025-06-30T12:13:33","guid":{"rendered":"http:\/\/localhost\/?p=7419"},"modified":"2025-06-30T12:13:33","modified_gmt":"2025-06-30T12:13:33","slug":"phpgurukul-student-record-system-registerphp-sql-injection","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7419","title":{"rendered":"PHPGurukul Student Record System register.php sql injection"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nPHPGurukul Student Record System register.php sql injection<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-30T16:32:07.016Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nPHPGurukul<\/td>\n<\/tr>\n
Product<\/th>\nStudent Record System<\/td>\n<\/tr>\n
Version<\/th>\n3.2<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n5.3 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:L\/UI:N\/VC:L\/VI:L\/VA:L\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA critical SQL injection vulnerability exists in PHPGurukul Student Record System 3.2, allowing remote attackers to inject SQL code via the session argument in register.php. This could lead to unauthorized data access and manipulation.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nPHPGurukul<\/td>\n<\/tr>\n
Product<\/th>\nStudent Record System<\/td>\n<\/tr>\n
Affected Version<\/th>\n3.2<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n