PT-2025-46968 · Phpgurukul · Phpgurukul Student Record System

Published 2025-11-14 · Updated 2025-11-14 · CVE-2024-44630

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.20

Description The Student Record System contains multiple parameters in the ‘register.php’ file that are susceptible to SQL injection. The following parameters are affected: c-full, fname, mname, lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1, marks1, sub2, course-short, income, category, ph, country, state, city, padd, cadd, and gender.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize all input received through the affected parameters in the ‘register.php’ file to prevent SQL injection attacks.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-44630

Affected Products

Phpgurukul Student Record System

References · 5

• 🔥 https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44630.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-44630 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44630 · Security Note
• https://twitter.com/CVEnew/status/1989367804689264881 · Twitter Post
• https://phpgurukul.com/student-record-system-php · Note