Vendors / PHPGurukul Records 1122 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 133
CVSS high 107
Exploited now PHPGurukul records in CISA KEV No PHPGurukul vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 9 records in Teachers Record Management System · all components
Priority HIGH 82
Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid parameter to admin/queries.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0056 · Published 2024-10-31 · No fix listed CWE-89
Priority HIGH 80
Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.005 · Published 2024-10-31 · No fix listed CWE-89
Priority HIGH 70
A vulnerability has been found in PHPGurukul Teachers Record Management System 2.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0046 · Published 2025-08-14 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Teachers Record Management System 2.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00487 · Published 2025-06-30 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, was found in PHPGurukul Teachers Record Management System 2.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00487 · Published 2025-06-30 · No fix listed CWE-74
Priority MEDIUM 60
A Reflected Cross Site Scripting (XSS) vulnerability was found in /trms/listed- teachers.php in PHPGurukul Teachers Record Management System v2.1, which allows remote attackers to execute arbitrary code via "searchinput"…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00442 · Published 2024-10-16 · No fix listed CWE-94
Priority MEDIUM 50
Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04884 · Published 2021-02-15 · No fix listed CWE-89
Priority MEDIUM 43
Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 thru 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in edit-subjects-detail.php, edit…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02578 · Published 2021-07-01 · No fix listed CWE-89
Priority LOW 27
A stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows remote authenticated users to inject arbitrary web script or HTML via the 'email' POST parameter in adminprofile.php.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0131 · Published 2021-07-01 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
133 107 877 5 0
THREATIST.IORead the docs