Vulnerabilities

TI-2025-35400 CVE-2025-56710 · GHSA-457m-59w6-w674

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of…

HIGH 65

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0.

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.00196 Published 2025-09-15 No fix listed CWE-352

TI-2025-32150 CVE-2025-50490 · GHSA-mg64-q56f-gxr3

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul…

HIGH 66

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00474 Published 2025-07-28 No fix listed CWE-20

TI-2025-32149 CVE-2025-50489 · GHSA-456h-6frm-3fqv

Improper session invalidation in the component /srms/change-password.php of PHPGurukul…

HIGH 66

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00566 Published 2025-07-28 No fix listed CWE-20

TI-2025-06871 CVE-2025-7534 · GHSA-hr9f-rjcc-r8rf

PHPGurukul Student Result Management System GET Parameter notice-details.php sql injection

HIGH 70

A vulnerability was found in PHPGurukul Student Result Management System 2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00547 Published 2025-07-13 No fix listed CWE-74

TI-2025-05039 CVE-2025-5599 · GHSA-pv9r-4f6f-g2p4

PHPGurukul Student Result Management System editmyexp.php sql injection

HIGH 70

A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00527 Published 2025-06-04 No fix listed CWE-74

TI-2023-26558 CVE-2023-48722 · GHSA-226h-h99r-j24r

Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

MEDIUM 43

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00671 Published 2023-12-21 No fix listed CWE-89

TI-2023-26557 CVE-2023-48720 · GHSA-r664-26m8-f6h9

Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

MEDIUM 43

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00671 Published 2023-12-21 No fix listed CWE-89

TI-2023-26556 CVE-2023-48718 · GHSA-62v3-x9j5-g8rj

Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00671 Published 2023-12-21 No fix listed CWE-89

Vulnerabilities

Filters