CVE-2024-44633

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.20

Description The PHPGurukul Student Record System is affected by a SQL Injection issue. This issue occurs via the currentpassword parameter in the 'change-password.php' file. Exploitation of this issue could allow an attacker to manipulate database queries.

Recommendations Apply any available updates or patches to address the SQL Injection issue in the 'change-password.php' file. As a temporary workaround, restrict access to the 'change-password.php' file or carefully validate the currentpassword parameter to prevent SQL Injection attacks.