CVE-2025-4112

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.20

Description A critical issue was found in the PHPGurukul Student Record System. The vulnerability affects the file "add-course.php" and is related to the manipulation of the course-short argument, leading to SQL injection. The attack can be initiated remotely.

Recommendations For PHPGurukul Student Record System version 3.20, consider restricting access to the /add-course.php file until a patch is available. As a temporary workaround, avoid using the course-short argument in the affected file to minimize the risk of exploitation.