Vendors / PHPGurukul Records 1122 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 133
CVSS high 107
Exploited now PHPGurukul records in CISA KEV No PHPGurukul vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00671 · Published 2023-12-21 · No fix listed CWE-89
Priority HIGH 70
A vulnerability was found in PHPGurukul Student Result Management System 2.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00547 · Published 2025-07-13 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00527 · Published 2025-06-04 · No fix listed CWE-74
Priority HIGH 66
Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00474 · Published 2025-07-28 · No fix listed CWE-20
Priority HIGH 66
Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00566 · Published 2025-07-28 · No fix listed CWE-20
Priority HIGH 65
A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0.
CVSS 3.1 HIGH 7.3· Local · No auth · No interaction · EPSS 0.00196 · Published 2025-09-15 · No fix listed CWE-352
Priority MEDIUM 43
Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00671 · Published 2023-12-21 · No fix listed CWE-89
Priority MEDIUM 43
Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00671 · Published 2023-12-21 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
133 107 877 5 0
THREATIST.IORead the docs