Vulnerability Details CVE-2021-26765
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.037
EPSS Ranking 87.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://github.com/BigTiger2020/Student-Record-System-/blob/main/README.md
- https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html
- https://phpgurukul.com/
- https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip
- https://github.com/BigTiger2020/Student-Record-System-/blob/main/README.md
- https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html
- https://phpgurukul.com/
- https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip
Products affected by CVE-2021-26765
-
cpe:2.3:a:phpgurukul:student_record_system:4.0