CVE-2025-4793

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Course Registration version 3.1

Description: A critical issue was found in the software, affecting an unknown function of the file /edit-student-profile.php. The manipulation of the cgpa argument leads to SQL injection. This issue can be exploited remotely.

Recommendations: For PHPGurukul Online Course Registration version 3.1, consider restricting access to the /edit-student-profile.php file until a patch is available. As a temporary workaround, avoid using the cgpa argument in the affected file to minimize the risk of exploitation.