PT-2025-26289 · Unknown · Phpgurukul Pre-School Enrollment System
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PHPGurukul Pre-School Enrollment System version 1.0
Description
A critical issue has been found in the processing of the file /admin/add-teacher.php. The manipulation of the
tsubject argument leads to SQL injection. The attack can be initiated remotely. An exploit has been publicly disclosed and may be used.Recommendations
For PHPGurukul Pre-School Enrollment System version 1.0, consider disabling access to the /admin/add-teacher.php file until a patch is available. Restrict the use of the
tsubject argument in the affected file to minimize the risk of exploitation.Exploit
Correção
SQL injection
Special Elements Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Phpgurukul Pre-School Enrollment System