Student record system

This hub aggregates every CVE we track for Student record system, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Student record system.

• CVE-2026-3403PHPGurukul Student Record Management System edit-subject.php cross site scripting2.4Mar 2, 2026
• CVE-2026-3402PHPGurukul Student Record Management System edit-course.php cross site scripting2.4Mar 2, 2026
• CVE-2025-63955A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submi...7.5Nov 18, 2025
• CVE-2024-55016PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php.6.5Nov 14, 2025
• CVE-2024-44632PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php.6.5Nov 14, 2025
• CVE-2024-44630Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, ro...6.5Nov 14, 2025
• CVE-2024-44640PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php.6.5Nov 14, 2025
• CVE-2024-44639PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php.6.5Nov 14, 2025
• CVE-2024-44636PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php.6.5Nov 14, 2025
• CVE-2024-44635PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php.6.1Nov 14, 2025
• CVE-2024-44633PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php.6.5Nov 14, 2025
• CVE-2025-6915PHPGurukul Student Record System register.php sql injection6.3Jun 30, 2025
• CVE-2025-6914PHPGurukul Student Record System edit-student.php sql injection6.3Jun 30, 2025
• CVE-2025-6913PHPGurukul Student Record System admin-profile.php sql injection6.3Jun 30, 2025
• CVE-2025-6912PHPGurukul Student Record System manage-students.php sql injection6.3Jun 30, 2025