Phpgurukul Student Result Management System vulnerabilities

8 vulnerabilities

Known vulnerabilities in Phpgurukul Student Result Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2025-7534phpgurukul · student_result_management_systemPHPGurukul Student Result Management System GET Parameter notice-details.php sql injectionA vulnerability was found in PHPGurukul Student Result Management System 2.0. It has been classified as critical. Affected is an unknown function of the file /notice-details.php of the component GET Parameter Handler. The manipulation of the argument nid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.55%7.3HighCVE-2025-56710phpgurukul · student_result_management_systemphpgurukul student_result_management_systemA Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0. This flaw allows an attacker to trick authenticated users into unintentionally modifying their account details. By crafting a malicious HTML page, an attacker can submit unauthorized requests to the vulnerable endpoint: /create-class.php.EPSS0.20%9.8CriticalCVE-2025-5599phpgurukul · student_result_management_systemPHPGurukul Student Result Management System editmyexp.php sql injectionA vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability affects unknown code of the file /editmyexp.php. The manipulation of the argument emp1ctc leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.48%7.5HighCVE-2025-50489phpgurukul · student_result_management_systemphpgurukul student_result_management_systemImproper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack.EPSS0.53%7.5HighCVE-2025-50490phpgurukul · student_result_management_systemphpgurukul student_result_management_systemImproper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack.EPSS0.44%9.8CriticalCVE-2023-48718phpgurukul · student_result_management_system +1 moreStudent Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_name' parameter of the add_students.php resource does not validate the characters received and they are sent unfiltered to the database.EPSS0.67%9.8CriticalCVE-2023-48720phpgurukul · student_result_management_system +1 moreStudent Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.EPSS0.67%9.8CriticalCVE-2023-48722phpgurukul · student_result_management_system +1 moreStudent Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_name' parameter of the add_results.php resource does not validate the characters received and they are sent unfiltered to the database.EPSS0.67%