CVE-2021-26764

2021-07-2215:56:33

mitre

www.cve.org

phpgurukul

student record system

sql injection

remote attackers

arbitrary sql statements

edit-std.php

AI Score

9.3

Confidence

High

EPSS

0.049

Percentile

92.9%

JSON

SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php.

References

github.com/BigTiger2020/Student-Record-System-/blob/main/README.md

packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html

phpgurukul.com/

phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip