PT-2026-20214 · Phpgurukul · Phpgurukul Student Management System

CVE-2024-55270

·

Publicado

2026-02-17

·

Atualizado

2026-02-22

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions phpgurukul Student Management System version 1.0
Description The software is susceptible to SQL injection in the 'studentms/admin/search.php' file through the searchdata parameter. This allows for potential unauthorized access to or modification of data within the system.
Recommendations Apply updates to address the SQL injection issue in the 'studentms/admin/search.php' file, specifically related to the searchdata parameter.

Exploit

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2024-55270

Produtos afetados

Phpgurukul Student Management System